Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v2.3.4: * 974af043 Bump golang.org/x/net to v0.55.0 (bsc#1267168 bsc#1251679) * ae39c90f Bump golang.org/x/crypto to v0.52.0 (bsc#1266187) - Update to v2.3.3: * 8b4af274 Avoid pulling binaries with curl * d46e30f4 Bump golangci/golangci-lint-action to v9 * 02caf200 Bump github.com/spf13/cobra library * e29e1fbf Bump github.com/jaypipes/ghw library * 652654e1 Bump github.com/bramvdbogaerde/go-scp library * f94a0c58 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * dc1a2056 Bump github.com/ulikunitz/xz library * 337a986c Update headers to 2026 * d6aac085 Switch from TW to Leap 16.0 for green flavor
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v2.3.4: * 974af043 Bump golang.org/x/net to v0.55.0 (bsc#1267168 bsc#1251679) * ae39c90f Bump golang.org/x/crypto to v0.52.0 (bsc#1266187) - Update to v2.3.3: * 8b4af274 Avoid pulling binaries with curl * d46e30f4 Bump golangci/golangci-lint-action to v9 * 02caf200 Bump github.com/spf13/cobra library * e29e1fbf Bump github.com/jaypipes/ghw library * 652654e1 Bump github.com/bramvdbogaerde/go-scp library * f94a0c58 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * dc1a2056 Bump github.com/ulikunitz/xz library * 337a986c Update headers to 2026 * d6aac085 Switch from TW to Leap 16.0 for green flavor
05 / REFERENCES