SUSE-SU-2026:3416-1

CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552).

Other updates and bugfixes:

Release 1.4.2:
- Use proper obs time format on changes generation.
- Upgrade x/net to 0.57.
- Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.1...1.4.2
Release 1.4.1:
- Upgrade to use go 1.25
- Bump github.com/prometheus/common from 0.59.1 to 0.61.0.
- Bump golang.org/x/net from 0.33.0 to 0.55.0.
- Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.0...1.4.1

References

Affected packages

SUSE:Linux Enterprise High Availability Extension 15 SP5

prometheus-ha_cluster_exporter

Name: prometheus-ha_cluster_exporter
Purl: pkg:rpm/suse/prometheus-ha_cluster_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP5

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4.2-150200.3.32.1

{
    "binaries":  [
        {
            "prometheus-ha_cluster_exporter":  "1.4.2-150200.3.32.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3416-1.json"

SUSE:Linux Enterprise High Availability Extension 15 SP6

prometheus-ha_cluster_exporter

Name: prometheus-ha_cluster_exporter
Purl: pkg:rpm/suse/prometheus-ha_cluster_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP6

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4.2-150200.3.32.1

{
    "binaries":  [
        {
            "prometheus-ha_cluster_exporter":  "1.4.2-150200.3.32.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3416-1.json"

SUSE:Linux Enterprise High Availability Extension 15 SP7

prometheus-ha_cluster_exporter

Name: prometheus-ha_cluster_exporter
Purl: pkg:rpm/suse/prometheus-ha_cluster_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4.2-150200.3.32.1

{
    "binaries":  [
        {
            "prometheus-ha_cluster_exporter":  "1.4.2-150200.3.32.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3416-1.json"

SUSE:Linux Enterprise Module for SAP Applications 15 SP4

prometheus-ha_cluster_exporter

Name: prometheus-ha_cluster_exporter
Purl: pkg:rpm/suse/prometheus-ha_cluster_exporter&distro=SUSE%20Linux%20Enterprise%20Module%20for%20SAP%20Applications%2015%20SP4

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4.2-150200.3.32.1

{
    "binaries":  [
        {
            "prometheus-ha_cluster_exporter":  "1.4.2-150200.3.32.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3416-1.json"