openSUSE-SU-2026:21841-1
openSUSE-SU-2026:21841-1 · Security update for hauler
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to fix: * bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library - update vendor.tar to fix: * bsc#1279416, CVE-2026-84304 * bsc#1279296, CVE-2026-84303 * bsc#1278934, CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers Update to 2.1.0 (bsc#1265425, CVE-2026-41888).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
hauler openSUSE:Leap 16.0
- Plages de versions concernées
- ECOSYSTEM: < 2.1.0-bp160.3.1
Mettez à jour vers 2.1.0-bp160.3.1
Sources originales
- https://bugzilla.suse.com/1265425
- https://bugzilla.suse.com/1278584
- https://bugzilla.suse.com/1278934
- https://bugzilla.suse.com/1279296
- https://bugzilla.suse.com/1279416
- https://www.suse.com/security/cve/CVE-2026-41888
- https://www.suse.com/security/cve/CVE-2026-56854
- https://www.suse.com/security/cve/CVE-2026-56855
- https://www.suse.com/security/cve/CVE-2026-78662
- https://www.suse.com/security/cve/CVE-2026-84303
- https://www.suse.com/security/cve/CVE-2026-84304
- https://www.suse.com/security/cve/CVE-2026-84445
- https://osv.dev/vulnerability/openSUSE-SU-2026:21841-1