← Search the atlas
SUSE-SU-2026:2325-1
Not scored
Security update for kubernetes1.26
This update for kubernetes1.26 fixes the following issues
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
(bsc#1265740).
- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service
(bsc#1262271).
Exploit probability
Not scored
Published
June 9, 2026
Required by
Not available
Last source change
June 10, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
kubernetes1.26
SUSE:Linux Enterprise Server 15 SP4-LTSS
kubernetes1.26
SUSE:Linux Enterprise Server 15 SP5-LTSS
kubernetes1.26
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
kubernetes1.26
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
kubernetes1.26
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2026:2325-1
This update for kubernetes1.26 fixes the following issues
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
(bsc#1265740).
- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service
(bsc#1262271).
View original source ↗
05 / REFERENCES
Further evidence