Skip to content
openSUSE Google Cloud SAP Agent Auth Bypass 2026-1194-1 CVE-2026

openSUSE Google Cloud SAP Agent Auth Bypass 2026-1194-1 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • April 7, 2026

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): * CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). Changelog: * Collect WLM metric `saphanasr_angi_installed` for all OS types. * Failure handling: Remove attached disks from CG * OTE Status checks for Parameter Manager (SAP Agent) * Log command-line arguments in configureinstance. * Minor multiple reliability checks and fixes * Support custom names for restored disks in hanadiskrestore * Add newAttachedDisks to Restorer and detach them on restore failure. * Improve unit test coverage for hanadiskbackup and hanadiskrestore * Add support for refresh point tests. * Refactor HANA disk backup user validation and physical path parsing. * Auto updated compiled protocol buffers * Parameter Manager integration to SAP Agent * Modify collection logic for SAP

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-1194=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-1194=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-1194=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-1194=1 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-1194=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-SLE-15.6-2026-1194=1

* Public Cloud Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-1194=1

* Public Cloud Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-1194=1

* Public Cloud Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-1194=1

* Public Cloud Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-1194=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.12-150100.3.63.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.12-150100.3.63.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.12-150100.3.63.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.12-150100.3.63.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * google-cloud-sap-agent-3.12-150100.3.63.1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* google-cloud-sap-agent-3.12-150100.3.63.1

* Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64)

* google-cloud-sap-agent-3.12-150100.3.63.1

* Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64)

* google-cloud-sap-agent-3.12-150100.3.63.1

* Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64)

* google-cloud-sap-agent-3.12-150100.3.63.1

* Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64)

* google-cloud-sap-agent-3.12-150100.3.63.1

* bsc#1259816 * bsc#1260265 ## References: * * *

*

*

*

Extracted Entities

Domains (1)