openSUSE Leap 16.0 Elemental-Toolkit Important Auth Bypass CVE-2026-33186
opensuse
June 9, 2026
An update that solves one vulnerability and has 4 bug fixes can now be installed.
Description
This update for elemental-toolkit fixes the following issue
- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo-
header (bsc#1260277).
Changes:
- Update to v2.3.4:
* 974af043 Bump golang.org/x/net to v0.55.0 (bsc#1267168 bsc#1251679)
* ae39c90f Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)
- Update to v2.3.3:
* 8b4af274 Avoid pulling binaries with curl
* d46e30f4 Bump golangci/golangci-lint-action to v9
* 02caf200 Bump github.com/spf13/cobra library
* e29e1fbf Bump github.com/jaypipes/ghw library
* 652654e1 Bump github.com/bramvdbogaerde/go-scp library
* f94a0c58 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
* dc1a2056 Bump github.com/ulikunitz/xz library
* 337a986c Update headers to 2026
* d6aac085 Switch from TW to Leap 16.0 for green flavor
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update...
Read the Full Advisory
Topics Covered
Patch
Package List
- openSUSE Leap 16.0:
elemental-toolkit-2.3.4-160000.1.1
References
* bsc#1251679
* bsc#1260277
* bsc#1266187
* bsc#1267168
References:
* https://www.suse.com/security/cve/CVE-2026-33186.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2026:20921-1
Rating: important
Affected Products:
openSUSE Leap 16.0
-------------------------------------------------------------
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!