SUSE-SU-2026:22074-1: elemental-toolkit&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:22074-1 is a vulnerability in elemental-toolkit&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 19 · Downstream 0 · Related 19Timeline
- 10-06-2026PublishedVulnerability first disclosed.
- 13-06-2026Last modifiedVulnerability information updated.
Description
Security update for elemental-toolkit This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to v2.2.9: * 0e33b2bc Bump golang.org/x/net to v0.55.0 (bsc#1267168) * 4f5423b9 Bump golang.org/x/crypto to v0.52.0 (bsc#1266187) - Update to v2.2.8: * 3f38ae3e Avoid pulling binaries with curl * ef3f97a0 Bump golangci/golangci-lint-action to v9 * 34f9ed84 Bump github.com/spf13/cobra library * dff54d9a Bump github.com/jaypipes/ghw library * 7b7ba7ac github.com/bramvdbogaerde/go-scp libary * ac19e71c Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * 55761782 Bump github.com/ulikunitz/xz library * d04e480d Update headers to 2026 * bb7974f4 Switch from TW to Leap 16.0 for green flavor
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- elemental-toolkit&distro=SUSE Linux Micro 6.1< 2.2.9-slfo.1.1_1.1
1 vendor · 1 product