SUSE-SU-2026:1013-1

This update fixes the following issues:

dracut-saltboot:

• Version update to 1.1.0:

  • Retry DHCP requests up to 3 times (bsc#1253004)

golang-github-QubitProducts-exporter_exporter:

• Non-customer-facing optimization and update

golang-github-boynux-squid_exporter:

• Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes (jsc#PED-14971):

  • Added compatibility for Squid 6 and support for the squid-internal-mgr metrics path
  • Added TLS and Basic Authentication to the exporter’s web interface
  • Added support for the exporter to authenticate against the Squid proxy itself
  • Allow the gathering of process information without requiring root privileges
  • The exporter can now be configured using environment variables
  • Added support for custom labels to all exported metrics for better data filtering
  • New metrics to track if Squid is running (squid_up), how long a scrape takes, and if any errors occurred
  • Added 'service time' metrics to analyze proxy speed and performance.
  • Added a metric for open file descriptors (process_open_fds) to help prevent connection bottlenecks
  • Corrected the squid_client_http_requests_total metric to ensure accurate reporting

golang-github-lusitaniae-apache_exporter:

• Version update from 1.0.8 to 1.0.10:

  • Updated github.com/prometheus/client_golang to 1.21.1
  • Updated github.com/prometheus/common to 0.63.0
  • Updated github.com/prometheus/exporter-toolkit to 0.14.0
  • Fixed signal handler logging

golang-github-prometheus-prometheus:

• Security issues fixed:

  • CVE-2026-27606: Fixed arbitrary file write via path traversal in rollup (bsc#1258893)
  • CVE-2026-25547: Fixed unbounded brace range expansion leading to excessive CPU and memory consumption (bsc#1257841)
  • CVE-2026-1615, CVE-2025-61140 The old web UI is no longer built due to security issues (bsc#1257897, bsc#1257442)
  • CVE-2025-13465: Bump lodash package to version 4.17.23 to fix prototype pollution...