SUSE-SU-2026:22051-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202622051-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22051-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:22051-1
- Upstream
- Related
- Published
- 2026-06-08T14:12:20Z
- Modified
- 2026-06-10T18:24:10Z
- Summary
- Security update for elemental-toolkit
- Details
-
This update for elemental-toolkit fixes the following issue
- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277).
Changes:
- Update to v2.3.4:
- 974af043 Bump golang.org/x/net to v0.55.0 (bsc#1267168 bsc#1251679)
- ae39c90f Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)
- Update to v2.3.3:
- 8b4af274 Avoid pulling binaries with curl
- d46e30f4 Bump golangci/golangci-lint-action to v9
- 02caf200 Bump github.com/spf13/cobra library
- e29e1fbf Bump github.com/jaypipes/ghw library
- 652654e1 Bump github.com/bramvdbogaerde/go-scp library
- f94a0c58 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
- dc1a2056 Bump github.com/ulikunitz/xz library
- 337a986c Update headers to 2026
- d6aac085 Switch from TW to Leap 16.0 for green flavor
- References