openSUSE-SU-2026:21841-1
openSUSE-SU-2026:21841-1 · Security update for hauler
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to fix: * bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library - update vendor.tar to fix: * bsc#1279416, CVE-2026-84304 * bsc#1279296, CVE-2026-84303 * bsc#1278934, CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers Update to 2.1.0 (bsc#1265425, CVE-2026-41888).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
hauler openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 2.1.0-bp160.3.1
Update to 2.1.0-bp160.3.1
Original sources
- https://bugzilla.suse.com/1265425
- https://bugzilla.suse.com/1278584
- https://bugzilla.suse.com/1278934
- https://bugzilla.suse.com/1279296
- https://bugzilla.suse.com/1279416
- https://www.suse.com/security/cve/CVE-2026-41888
- https://www.suse.com/security/cve/CVE-2026-56854
- https://www.suse.com/security/cve/CVE-2026-56855
- https://www.suse.com/security/cve/CVE-2026-78662
- https://www.suse.com/security/cve/CVE-2026-84303
- https://www.suse.com/security/cve/CVE-2026-84304
- https://www.suse.com/security/cve/CVE-2026-84445
- https://osv.dev/vulnerability/openSUSE-SU-2026:21841-1