FlawAtlas
Search the atlas
SUSE-SU-2026:21210-1 Not scored

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). Changes for google-cloud-sap-agent: * Collect WLM metric `saphanasr_angi_installed` for all OS types. * Failure handling: Remove attached disks from CG * OTE Status checks for Parameter Manager (SAP Agent) * Log command-line arguments in configureinstance. * Minor multiple reliability checks and fixes * Support custom names for restored disks in hanadiskrestore * Add newAttachedDisks to Restorer and detach them on restore failure. * Improve unit test coverage for hanadiskbackup and hanadiskrestore * Add support for refresh point tests. * Refactor HANA disk backup user validation and physical path parsing. * Auto updated compiled protocol buffers * Parameter Manager integration to SAP Agent * Modify collection logic for SAP HANA configuration files. * Update workloadagentplatform version and hash. * Update WLM Validation metrics to support SAPHanaSR-angi setups. * Increment agent version to 3.12. * SAP HANA Pacemaker failover settings can come from `SAPHanaController`. * Update collection for WLM metric `ha_sr_hook_configured`. * Refactor CheckTopology to accept instance number. * Use constant backoff with max retries for snapshot group operations. * Update workloadagentplatform dependency

Exploit probability Not scored
Published April 17, 2026
Required by Not available
Last source change April 22, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 16.0 google-cloud-sap-agent
SUSE:Linux Enterprise Server for SAP applications 16.0 google-cloud-sap-agent

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:21210-1

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). Changes for google-cloud-sap-agent: * Collect WLM metric `saphanasr_angi_installed` for all OS types. * Failure handling: Remove attached disks from CG * OTE Status checks for Parameter Manager (SAP Agent) * Log command-line arguments in configureinstance. * Minor multiple reliability checks and fixes * Support custom names for restored disks in hanadiskrestore * Add newAttachedDisks to Restorer and detach them on restore failure. * Improve unit test coverage for hanadiskbackup and hanadiskrestore * Add support for refresh point tests. * Refactor HANA disk backup user validation and physical path parsing. * Auto updated compiled protocol buffers * Parameter Manager integration to SAP Agent * Modify collection logic for SAP HANA configuration files. * Update workloadagentplatform version and hash. * Update WLM Validation metrics to support SAPHanaSR-angi setups. * Increment agent version to 3.12. * SAP HANA Pacemaker failover settings can come from `SAPHanaController`. * Update collection for WLM metric `ha_sr_hook_configured`. * Refactor CheckTopology to accept instance number. * Use constant backoff with max retries for snapshot group operations. * Update workloadagentplatform dependency

View original source

05 / REFERENCES

Further evidence