openSUSE-SU-2026:22116-1
openSUSE-SU-2026:22116-1 · Security update for hauler
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.1: * bumped go version to v1.26.7 (backport #771) * https registry auth fix (backport #763) * adjust supporting artifact retrieval (backport #777) * reject --platform on digest-pinned multi-platform images * fix: serve registry returns an empty /v2/_catalog list * added airgapped support for install.sh and added windows install.ps1 * added/fixed basic auth with registry and fileserver * fixed store inventory race with concurrent processes * added type filter to store copy * fixed missing dirs in containers * updated github workflows with versions, permissions, and concurrency - update vendor.tar to fix: * bsc#1280110, CVE-2026-53495
Fix available
- Published
- Updated
Stack: system
Affected products and versions
hauler openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 2.1.1-bp160.1.1
Update to 2.1.1-bp160.1.1