SUSE-SU-2026:21849-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-202621849-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:21849-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:21849-1
Upstream
CVE (2)
Related
Published
2026-05-26T12:20:11Z
Modified
2026-06-02T18:24:26Z
Summary
Security update for google-osconfig-agent
Details

This update for google-osconfig-agent fixes the following issues

  • CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533).
  • CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260264).
References

Affected packages