gpp_maybe Security update for mcphost

SUSE-SLES-16.0-1406

This update for mcphost fixes the following issues: - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation (bsc#1272488). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266572). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272131).

• Release Date
  Jul 30 2026
• References
  Bugzilla: 1266572, 1272131, 1272488
  CVEs: CVE-2026-5160, CVE-2026-39821, CVE-2026-56852
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  mcphost
  A CLI host application for the Model Context Protocol (MCP)

  0.34.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  mcphost
  A CLI host application for the Model Context Protocol (MCP)

  0.34.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  mcphost
  A CLI host application for the Model Context Protocol (MCP)

  0.34.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  mcphost
  A CLI host application for the Model Context Protocol (MCP)

  0.34.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  mcphost
  A CLI host application for the Model Context Protocol (MCP)

  0.34.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  mcphost
  A CLI host application for the Model Context Protocol (MCP)

  0.34.0-160000.3.1 lock rpm