SUSE-SU-2026:1395-1

Details

This update for azure-storage-azcopy fixes the following issues:

CVE-2026-33186: Authorization bypass in grpc-go due to improper validation of the HTTP/2 :path pseudo-header (bsc#1260307).

Affected Packages

azure-storage-azcopy

SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP6SUSE Linux Enterprise Module for Public Cloud 15 SP7

Fixed in:

10.29.1-150400.9.6.1

References

REPORT

https://bugzilla.suse.com/1260307

WEB

https://www.suse.com/security/cve/CVE-2026-33186

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20261395-1/