Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 1.4.2 (bsc#1258614, CVE-2026-24122): * Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 in the go_modules group across 1 directory * fix for new helm chart features * Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 in the go_modules group across 1 directory * Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 in the go_modules group across 1 directory * Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory * update cosign fork to 3.0.4 plus dep tidy * fix: Fix file:// dependency chart path resolution * update github.com/olekukonko/tablewriter to v1.1.2 * keep registry on image rewrite if not specified * Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory * fix: handling of file referenced dependencies without repository field * Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in the go_modules group across 1 directory * dev.md file * smaller changes and updates for v1.4.2 release
Security update for hauler
Description
This update for hauler fixes the following issues: Changes in hauler: - update to 1.4.2 (bsc#1258614, CVE-2026-24122): * Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 in the go_modules group across 1 directory * fix for new helm chart features * Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 in the go_modules group across 1 directory * Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 in the go_modules group across 1 directory * Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory * update cosign fork to 3.0.4 plus dep tidy * fix: Fix file:// dependency chart path resolution * update github.com/olekukonko/tablewriter to v1.1.2 * keep registry on image rewrite if not specified * Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory * fix: handling of file referenced dependencies without repository field * Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in the go_modules group across 1 directory * dev.md file * smaller changes and updates for v1.4.2 release
Affected software
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:20662-1
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6aab498855bf5e2cf5990eff
Added to database: 09/17/2026, 01:59:36 UTC
Last updated: 09/17/2026, 02:02:25 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.