openSUSE-SU-2026:21841-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:21841-1

Upstream

CVE (7)

Related

CVE (7)

Published

2026-09-14T13:24:33Z

Modified

2026-09-15T18:23:29Z

Summary

Security update for hauler

Details

This update for hauler fixes the following issues:

Changes in hauler:

update vendor.tar to fix:
- bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library
update vendor.tar to fix:
- bsc#1279416, CVE-2026-84304
- bsc#1279296, CVE-2026-84303
- bsc#1278934, CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers

Update to 2.1.0 (bsc#1265425, CVE-2026-41888).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.1.0-bp160.3.1

{
    "binaries":  [
        {
            "hauler":  "2.1.0-bp160.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21841-1.json"