OPENSUSE-SU-2026:21010-1: google-cloud-sap-agent&distro=openSUSE Leap 16.0 openSUSE

Vulnerability summary

OPENSUSE-SU-2026:21010-1 is a vulnerability in google-cloud-sap-agent&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.

Timeline

1. 22-06-2026
   PublishedVulnerability first disclosed.
2. 30-06-2026
   Last modifiedVulnerability information updated.

Description

Security update for google-cloud-sap-agent This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-agent: - Update to version 3.15 * Remove LoggingClient error failure for hanadiskrestore and hanadiskbackup. * Add checks for unexpected arguments in hanadiskbackup and hanadiskrestore. * Update SAP Agent version to 3.15. * Refactor grubBootLoaderX5 to check for BLS support via grub2-mkconfig help. * Update all go dependencies * Check grub2-mkconfig for BLS support on X4 instances. * Add tenant SID collection to supportbundle. * Update golang.org/x/net dependency. This is to address (#444) * Fork tuned.conf to tuned-x5.conf for X5 series configurations * Enable configureX5 in configureinstance. * Create skeleton implementation and tests for X5 configureinstance support. * Enable detection of x5 machine types in configureinstance - Update to version 3.14 (bsc#1265991) * Update Daemon Restart method to pass the correct cancel function to the new handler. * Remove redundant error logging in HANA disk restore. * Fetch and rename Logical Volume during HANA disk restore. * Add usage metrics for CMEK disk restore. * Add multi-region and global KMS keys location checks. * Convert HANA SID to uppercase in hanadiskbackup and hanadiskrestore. * Log warning instead of erroring out on KMS key get failure. * Initialize GCE client in status onetime command. * Validate presence of KMS key in hanadiskrestore. * Add SID parameter to HANA backup/restore path functions. * Add KMS key location validation for HANA disk restore. * Update agent version to 3.14. * Fixes an issue if there is a whitespace around an argument passed in * Add validation to prevent using both CSEK and KMS keys in hanadiskrestore. * Handle disk recreation in HANA disk restore when IOPS, throughput, size, or KMS key are specified. * Refactor disk restore and configuration logic. * Add support for CMEK encryption of restored disks. * Remove obsolete TODOs. - Update to version 3.13 * Replace strings.TrimSuffix with strings.TrimSpace in hanabackup.go * Improve error messages in hanabackup.go. * Add system state logging and logical device verification. * Minor version bump * Improve SAP instance comparison for process metrics collectors to prevent unnecessary restarts of collectors. * Delete supportbundlehandler package. * Remove configurehandler from sapguestactions. * Delete hanadiskbackuphandler from sapguestactions. * Remove Guest Actions and GCBDR Actions from initial daemon start. * Remove `gsutil` check from collection definition. * Delete performancediagnosticshandler package. * Remove unused handlers and shell command execution. * status feature fixes - pass secret name * Fix an issue in system discovery if discovering a network fails, particularly due to an IAM permission error. * Add verification for HANA data volume state after disk restore. * Error handling for rescanVolumegroups and improved logging. * Add link to What's New page in the sapagent README. * Add secret manager IAM checks if secret key is preset in status

No weakness data has been published for this record.