openSUSE Leap 16.0 Elemental-Toolkit Important Auth Bypass CVE-2026

- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo-

header (bsc#1260277).

* 974af043 Bump golang.org/x/net to v0.55.0 (bsc#1267168 bsc#1251679)

* ae39c90f Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)

* 8b4af274 Avoid pulling binaries with curl

* d46e30f4 Bump golangci/golangci-lint-action to v9

* 02caf200 Bump github.com/spf13/cobra library

* e29e1fbf Bump github.com/jaypipes/ghw library

* 652654e1 Bump github.com/bramvdbogaerde/go-scp library

* f94a0c58 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)

* dc1a2056 Bump github.com/ulikunitz/xz library

* 337a986c Update headers to 2026

* d6aac085 Switch from TW to Leap 16.0 for green flavor

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update...

- openSUSE Leap 16.0:

elemental-toolkit-2.3.4-160000.1.1

*

Get the latest Linux and open source security news straight to your inbox.