SUSE-SU-2026:22065-1: elemental-toolkit&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:22065-1 is a vulnerability in elemental-toolkit&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 10-06-2026
   PublishedVulnerability first disclosed.
2. 13-06-2026
   Last modifiedVulnerability information updated.

Description

Security update for elemental-toolkit This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to version 2.1.6: * Bump golang.org/x/net to v0.55.0 (bsc#1267168) * Bump golang.org/x/crypto to v0.52.0 (bsc#1266187) * Update orange flavor * Install hugo from the OS repositories * Bump actions/upload-artifact to v7 * Bump actions/cache to v5 * Bump golangci/golangci-lint-action to v9 * Bump github.com/spf13/cobra library * Bump github.com/jaypipes/ghw library * Bump github.com/bramvdbogaerde/go-scp library * Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * Bump github.com/ulikunitz/xz library * Do not clean cache on PRs from forks

No weakness data has been published for this record.