Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugfixes: - Release 1.4.2: * Use proper obs time format on changes generation. * Upgrade x/net to 0.57. * Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.1...1.4.2 - Release 1.4.1: * Upgrade to use go 1.25 * Bump github.com/prometheus/common from 0.59.1 to 0.61.0. * Bump golang.org/x/net from 0.33.0 to 0.55.0. * Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.0...1.4.1
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for prometheus-ha_cluster_exporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266552). Other updates and bugfixes: - Release 1.4.2: * Use proper obs time format on changes generation. * Upgrade x/net to 0.57. * Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.1...1.4.2 - Release 1.4.1: * Upgrade to use go 1.25 * Bump github.com/prometheus/common from 0.59.1 to 0.61.0. * Bump golang.org/x/net from 0.33.0 to 0.55.0. * Full changelog: https://github.com/ClusterLabs/ha_cluster_exporter/compare/1.4.0...1.4.1
05 / REFERENCES