{"id":"openSUSE-SU-2026:22116-1","summary":"Security update for hauler","details":"This update for hauler fixes the following issues:\n\nChanges in hauler:\n\n- update to 2.1.1:\n  * bumped go version to v1.26.7 (backport #771)\n  * https registry auth fix (backport #763)\n  * adjust supporting artifact retrieval (backport #777)\n  * reject --platform on digest-pinned multi-platform images\n  * fix: serve registry returns an empty /v2/_catalog list\n  * added airgapped support for install.sh and added windows\n    install.ps1\n  * added/fixed basic auth with registry and fileserver\n  * fixed store inventory race with concurrent processes\n  * added type filter to store copy\n  * fixed missing dirs in containers\n  * updated github workflows with versions, permissions, and\n    concurrency\n\n- update vendor.tar to fix:\n  * bsc#1280110, CVE-2026-53495\n","modified":"2026-10-19T17:23:14.592172124Z","published":"2026-10-14T07:40:11Z","related":["CVE-2026-53495","CVE-2026-63209"],"upstream":["CVE-2026-53495","CVE-2026-63209"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280110"},{"type":"REPORT","url":"https://bugzilla.suse.com/1283673"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53495"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-63209"}],"affected":[{"package":{"name":"hauler","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/hauler&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"hauler":"2.1.1-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22116-1.json"}}],"schema_version":"1.9.0"}