SUSE-SU-2026:0840-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:0840-1

UNKNOWN

Security update for grpc

Published Mar 6, 2026

Modified 1 months ago

Fix available

Details

This update for grpc fixes the following issue:

CVE-2023-33953: unbounded memory and CPU consumption in the HPACK parser leads to remote DoS (bsc#1214148).

Affected Packages

grpc

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

1.25.0-150200.3.10.1

libgrpc++1

Fixed in:

1.25.0-150200.3.10.1

libgrpc8

Fixed in:

1.25.0-150200.3.10.1

python3-grpcio

SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP6SUSE Linux Enterprise Module for Public Cloud 15 SP7

Fixed in:

1.25.0-150200.3.10.1

References

REPORT

https://bugzilla.suse.com/1214148

WEB

https://www.suse.com/security/cve/CVE-2023-33953

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260840-1/

Upstream

CVE-2023-33953

Ecosystems(15)

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7

Timeline

PublishedMar 6, 2026

ModifiedMar 6, 2026