🛡️ SUSE-SU-2026:0628-1 — golang-github-boynux-squid-exporter (CVE-2025-12816 +1 more)

Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues:

golang-github-QubitProducts-exporter_exporter:

• Non-customer-facing optimization around source building

golang-github-boynux-squid_exporter:

• Update to version 1.13.0 (jsc#PED-14971)
• Add support for squid-internal-mgr path for metrics.
• Update to version 1.12.0
• Add TLS and basic authentication support for the web interface.
• Update to version 1.11.0
• Allow adding custom labels to all metrics.
• Update to version 1.10.0
• Add ability to configure the exporter using environment variables.
• Add support for Squid 6
• Add squid_up metric
• Add squid_scrape_duration_seconds metric
• Add squid_scrape_error metric
• Update to version 1.9.0
• Add process_open_fds metric to monitor open file descriptors.
• Use CAP_DAC_READ_SEARCH capability to allow reading process information without running as root.
• Update to version 1.8.0
• Add various service time metrics to provide more detailed performance data.
• Update to version 1.7.0
• Add support for basic authentication against the Squid proxy.
• Fix squid_client_http_requests_total metric
• Upstream changes for v1.9.0:
• Use CAP_DAC_READ_SEARCH capability to allow

reading process information without running as root.

• Upstream changes for v1.8.0:
• Add various service time metrics to provide more detailed

performance data.

• Upstream changes for v1.7.0:

Squid proxy.Update to version 1.10.0

• Add ability to configure the exporter using environment

variables.

• Add process_open_fds metric to monitor open file descriptors.
• Use CAP_DAC_READ_SEARCH capability to allow reading process

information without running as root.

• Add various service time metrics to provide more detailed

performance data.

• Add support for basic authentication against the Squid proxy.
• Use current distro go default version. Use auto-versioning

on SUSE as well.

golang-github-lusitaniae-apache_exporter:

• Build without apparmor for openSUSE Leap 16, SLES 16 or newer
• Update to version 1.0.10
• Update github.com/prometheus/client_golang to 1.21.1
• Update github.com/prometheus/common to 0.63.0
• Update github.com/prometheus/exporter-toolkit to 0.14.0
• Update to version 1.0.9
• Update github.com/prometheus/client_golang to 1.20.4
• Update github.com/prometheus/common to 0.59.1
• Update github.com/prometheus/exporter-toolkit to 0.13.0
• Migrate logging to log/slog
• Fix signal handler logging

golang-github-prometheus-alertmanager:

• Require gcc11-c++ for building with SLE 12

golang-github-prometheus-node_exporter:

• Require gcc11-c++ for building with SLE 12

golang-github-prometheus-prometheus:

• Security issues fixed:
• CVE-2025-12816: Interpretation conflict vulnerability allowing bypassing cryptographic verifications (bsc#1255588)
• Update to 3.5.0 (jsc#PED-13824):

This is a Long-Term Support (LTS) release.

• [FEATURE] Remote-write: Add support for Azure Workload Identity as an authentication method for the receiver.
• [FEATURE] PromQL: Add first_over_time(...) and ts_of_first_over_time(...) behind feature flag.
• [FEATURE] Federation: Add support for native histograms with custom buckets (NHCB).
• [ENHANCEMENT] PromQL: Add warn-level annotations for counter reset conflicts in certain histogram operations.
• [ENHANCEMENT] UI: Add scrape interval and scrape timeout to targets page.
• Update to 3.4.0:
• [FEATURE] SD: Add unified AWS service discovery for ec2, lightsail and ecs services.
• [FEATURE] Native histograms are now a stable, but optional feature.
• [FEATURE] UI: Show detailed relabeling steps for each discovered target.
• [ENHANCEMENT] Alerting: Add 'unknown' state for alerting rules that haven't been evaluated yet.
• [BUGFIX] Scrape: Fix a bug where scrape cache would not be cleared on startup.
• Update to 3.3.0:
• [FEATURE] Spring Boot 3.3 includes support for the Prometheus Client 1.x.
• [ENHANCEMENT] Dependency management for Dropwizard Metrics has been removed.
• Update to 3.2.0:
• [FEATURE] OAuth2: support jwt-bearer grant-type (RFC7523 3.1).
• [ENHANCEMENT] PromQL: Reconcile mismatched NHCB bounds in Add

and Sub.

• [BUGFIX] TSDB: Native Histogram Custom Bounds with a NaN

threshold are now rejected.

• Update to 3.1.0:
• [FEATURE] Remote-write 2 (receiving): Update to 2.0-rc.4 spec.

'created timestamp' (CT) is now called 'start timestamp' (ST).

• [BUGFIX] Mixin: Add static UID to the remote-write dashboard.
• Update to 3.0.1:
• [BUGFIX] Promql: Make subqueries left open.
• [BUGFIX] Fix memory leak when query log is enabled.
• [BUGFIX] Support utf8 names on /v1/label/:name/values endpoint.
• Update to 3.0.0:

This release includes new features such as a brand new UI and

UTF-8 support enabled by default.

• [CHANGE] Deprecated feature flags removed.
• [FEATURE] New UI.
• [FEATURE] Remote Write 2.0.
• [