SUSE-SU-2026:24604-1

Dashboard / Vulnerabilities / SUSE-SU-2026:24604-1

SUSE-SU-2026:24604-1

Summary: Security update for google-cloud-sap-agent

Details: This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing-related headers (bsc#1287058). - CVE-2026-78663: golang.org/x/net/http2: double flow control refund on HTTP/2 server streams (bsc#1287137). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285292). - CVE-2026-97032: golang.org/x/net/http2: HTTP/2 server crash due to HPACK encoder race (bsc#1287487). - CVE-2026-116585,CVE-2026-116586,CVE-2026-116587: github.com/go-jose/go-jose/v4: multiple security issues in github.com/go-jose/go-jose before 4.1.6 (bsc#1288375).

References: https://www.suse.com/support/update/announcement/2026/suse-su-202624604-1/, https://bugzilla.suse.com/1285292, https://bugzilla.suse.com/1286994, https://bugzilla.suse.com/1287058, https://bugzilla.suse.com/1287137, https://bugzilla.suse.com/1287487, https://bugzilla.suse.com/1288375, https://www.suse.com/security/cve/CVE-2026-116585, https://www.suse.com/security/cve/CVE-2026-116586, https://www.suse.com/security/cve/CVE-2026-116587, https://www.suse.com/security/cve/CVE-2026-78659, https://www.suse.com/security/cve/CVE-2026-78660, https://www.suse.com/security/cve/CVE-2026-78663, https://www.suse.com/security/cve/CVE-2026-78669, https://www.suse.com/security/cve/CVE-2026-97032