openSUSE-SU-2026:20711-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20711-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20711-1
- Upstream
CVE (2)
- Related
- Published
- 2026-05-09T08:42:06Z
- Modified
- 2026-05-11T08:15:38Z
- Summary
- Security update for hauler
- Details
-
This update for hauler fixes the following issues:
Changes in hauler:
- update to 1.4.3 ( bsc#1262353, CVE-2026-39984, bsc#1262942, CVE-2026-34986):
- [1.4] Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in the go_modules group across 1 directory
- [1.4] Bump github.com/sigstore/timestamp-authority/v2 from 2.0.4 to 2.0.6 in the go_modules group across 1 directory
- [1.4] Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in the go_modules group across 1 directory
- fixed versions and dependencies on release/1.4
- [1.4] removed unnecessary rewrite flag from sync
- added makefile command for vulnerability checks (backport #577)
- remove cherrypick bot and add mergify details (backport #581)
- update to 1.4.3 ( bsc#1262353, CVE-2026-39984, bsc#1262942, CVE-2026-34986):
- References