gpp_maybe Security update for elemental-toolkit

SUSE-SLE-Micro-6.1-570

This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to v2.2.9: * 0e33b2bc Bump golang.org/x/net to v0.55.0 (bsc#1267168) * 4f5423b9 Bump golang.org/x/crypto to v0.52.0 (bsc#1266187) - Update to v2.2.8: * 3f38ae3e Avoid pulling binaries with curl * ef3f97a0 Bump golangci/golangci-lint-action to v9 * 34f9ed84 Bump github.com/spf13/cobra library * dff54d9a Bump github.com/jaypipes/ghw library * 7b7ba7ac github.com/bramvdbogaerde/go-scp libary * ac19e71c Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * 55761782 Bump github.com/ulikunitz/xz library * d04e480d Update headers to 2026 * bb7974f4 Switch from TW to Leap 16.0 for green flavor

• Release Date
  Jun 10 2026
• References
  Bugzilla: 1260277, 1266187, 1267168
  CVEs: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.1 aarch64

• Packages
  elemental-toolkit
  The command line client for Elemental

  2.2.9-slfo.1.1_1.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  elemental-toolkit
  The command line client for Elemental

  2.2.9-slfo.1.1_1.1 lock rpm