< back to search

gpp_maybe Security update for prometheus-ha_cluster_exporter
SUSE-SLE-Module-SAP-Applications-15-SP4-2026-3416

This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugfixes: - Release 1.4.2: * Use proper obs time format on changes generation. * Upgrade x/net to 0.57. * Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.1...1.4.2 - Release 1.4.1: * Upgrade to use go 1.25 * Bump github.com/prometheus/common from 0.59.1 to 0.61.0. * Bump golang.org/x/net from 0.33.0 to 0.55.0. * Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.0...1.4.1

  • Release Date
    Jul 30 2026
  • References
    Bugzilla: 1266552
    CVEs: CVE-2026-39821
  • Type
    security
  • Severity
    important

cloud_download Downloads

SAP Applications Module 15.4 ppc64le
SAP Applications Module 15.4 x86_64