ROOT-APP-GOBINARY-CVE-2026-84304 CVE-2026-84304 in google.golang.org/grpc - Patched by Root

Root has patched CVE-2026-84304 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-84445 CVE-2026-84445 in google.golang.org/grpc - Patched by Root

Root has patched CVE-2026-84445 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-HRXH-6V49-42GF GHSA-hrxh-6v49-42gf in google.golang.org/grpc - Patched by Root

Root has patched GHSA-hrxh-6v49-42gf in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

SUSE SLES15 Security Update : amazon-cloudwatch-agent (SUSE-SU-2026:4388-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4388-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

SUSE SLES16 Security Update : distribution (SUSE-SU-2026:23864-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23864-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through...

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:21898-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21898-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21886-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21886-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case o...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:4308-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4308-1 advisory. - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855:...

Security update for mcphost (important)

openSUSE security update: security update for mcphost ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21886-1 Rating: important References: bsc1278853 bsc1279274 bsc1279396 Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores:...

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278666. CVE-2026-78662:...

SUSE-SU-2026:4308-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278666. - CVE-2026-78662:...

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 ,1.2.0 by vulnerabilities in the package google.golang.org/grpc

Summary Impacted IBM optim 1.0.0, 1.1.0 ,1.2.0 by vulnerabilities in the package google.golang.org/grpc. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-33186 DESCRIPTION: gRPC-Go is the Go...

OPENSUSE-SU-2026:21898-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

SUSE-SU-2026:23864-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

SUSE-SU-2026:23852-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

OPENSUSE-SU-2026:21886-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279274. - CVE-2026-84304: google.golang.org/grpc: heap memory...

SUSE-SU-2026:23745-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260264. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass an...

openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:21843-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21843-1 advisory. Changes in cadvisor: update vendor.tar to fix: bsc1279044, CVE-2026-84445 bsc1279224, CVE-2026-84304 bsc1279320, CVE-2026-84303: cadvisor:...

GO-2026-6441 Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

In google.golang.org/grpc, the xDS RBAC HTTP filter does not lowercase header matcher names before evaluating them against incoming request metadata. When an RBAC policy defines rules such as DENY referencing headers with uppercase or mixed-case characters, the rule fails to match, causing...