Description
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as X-Role or User-Agent therefore does not match and fails open, allowing requests that should be rejected. The same case mismatch permits :Scheme or Grpc-Status to evade gRFC A41 validation and prevents Host from being rewritten to :authority. This issue is fixed in version 1.83.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| grpc | grpc-go | < 1.83.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-google-grpc | No fix yet | — |
| Debian 13 | golang-google-grpc | No fix yet | — |
| Debian 12 | golang-google-grpc | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | grpc +2 | No fix yet | — |
| Ubuntu 26.04 LTS | grpc +2 | No fix yet | — |
| Ubuntu 24.04 LTS | grpc +1 | No fix yet | — |
| Ubuntu 22.04 LTS | grpc +1 | No fix yet | — |
| Ubuntu 20.04 LTS | grpc +1 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | grpc +1 | No fix yet | — |
| Ubuntu 16.04 LTS | grpc +1 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | google-guest-agent | No fix yet | — |
| Ubuntu Pro 18.04 LTS | google-guest-agent | No fix yet | — |
| Ubuntu Pro 16.04 LTS | google-guest-agent | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | alloy | 1.20.1-150700.15.34.1 | SUSE-SU-2026:5203-1 |
| SLES 15 SP7 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP7 | apptainer | 1.5.3-150600.4.43.1 | SUSE-SU-2026:4308-1 |
| SLES 15 SP7 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP7 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP7 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP7 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP7 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP7 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP7 | kubevirt | 1.7.4-150700.3.42.1 | SUSE-SU-2026:5167-1 |
| SLES 15 SP6 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP6 | apptainer | 1.5.3-150600.4.43.1 | SUSE-SU-2026:4308-1 |
| SLES 15 SP6 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP6 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP6 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP6 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP6 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP6 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP5 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP5 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP5 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP5 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP5 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP5 | terraform-provider-aws | 3.11.0-150200.6.29.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-external | 2.0.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-google | 3.43.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-helm | 2.9.0-150200.6.34.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-local | 2.0.0-150200.6.30.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-null | 3.0.0-150200.6.27.1 | SUSE-SU-2026:4628-1, SUSE-SU-2026:4062-1 |
| SLES 15 SP5 | terraform-provider-random | 3.0.0-150200.6.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 | SUSE-SU-2026:4444-1, SUSE-SU-2026:4389-1 |
| SLES 15 SP5 | terraform-provider-tls | 3.0.0-150200.5.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP4 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP4 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP4 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP4 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP4 | terraform-provider-aws | 3.11.0-150200.6.29.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-external | 2.0.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-google | 3.43.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-helm | 2.9.0-150200.6.34.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-local | 2.0.0-150200.6.30.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-null | 3.0.0-150200.6.27.1 | SUSE-SU-2026:4628-1, SUSE-SU-2026:4062-1 |
| SLES 15 SP4 | terraform-provider-random | 3.0.0-150200.6.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 | SUSE-SU-2026:4444-1, SUSE-SU-2026:4389-1 |
| SLES 15 SP4 | terraform-provider-tls | 3.0.0-150200.5.26.2 | SUSE-SU-2026:4628-1 |
| SLES 12 | google-cloud-sap-agent | 3.15-6.81.1 | SUSE-SU-2026:4178-1 |
| SLES 12 | google-guest-agent | 20260903.01-1.75.1 | SUSE-SU-2026:4272-1 |
| SLES 12 | google-osconfig-agent | 20260911.00-1.60.1 | SUSE-SU-2026:4292-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 | SUSE-SU-2026:24150-1 |
| SLES for SAP 16.0 | distribution | 3.1.1-160000.3.1 | SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1 |
| SLES for SAP 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1 |
| SLES for SAP 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | SUSE-SU-2026:23863-1, SUSE-SU-2026:23855-1 |
| SLES for SAP 16.0 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23688-1 |
| SLES for SAP 15 SP6 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP6 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES for SAP 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES for SAP 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 | SUSE-SU-2026:24150-1 |
| SLES 16.0 | distribution | 3.1.1-160000.3.1 | SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1 |
| SLES 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1 |
| SLES 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | SUSE-SU-2026:23863-1, SUSE-SU-2026:23855-1 |
| SLES 16.0 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23688-1 |
| SLE Micro 6.2 | elemental | 2.3.2-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | elemental-register | 1.9.3-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | elemental-system-agent | 0.15.2-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | elemental-toolkit | 2.3.5-160000.1.1 | SUSE-SU-2026:24645-1 |
| SLE Micro 6.2 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23506-1 |
| SLE Micro 6.1 | google-guest-agent | 20260903.01-slfo.1.1_1.1 | SUSE-SU-2026:23736-1 |
| SLE Micro 6.1 | google-osconfig-agent | 20260908.00-slfo.1.1_1.1 | SUSE-SU-2026:23739-1 |
| SLE Micro 6.1 | helm | 3.21.3-slfo.1.1_3.1 | SUSE-SU-2026:23730-1 |
| SLE Micro 6.0 | elemental-operator | 1.6.12-159998.1.1 | SUSE-SU-2026:24709-1 |
| SLE Micro 6.0 | elemental-system-agent | 0.15.2-159998.1.1 | SUSE-SU-2026:24709-1 |
| SLE Micro 6.0 | elemental-toolkit | 2.1.7-159998.1.1 | SUSE-SU-2026:24709-1 |
| SLE Micro 6.0 | google-guest-agent | 20260903.01-1.1 | SUSE-SU-2026:23831-1 |
| SLE Micro 6.0 | google-osconfig-agent | 20260908.00-1.1 | SUSE-SU-2026:23548-1 |
| SLE Micro 6.0 | helm | 3.21.3-3.1 | SUSE-SU-2026:23546-1 |
| SLE Micro 5.5 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLE Micro 5.5 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLE Micro 5.5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLE HPC 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLE HPC 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLE HPC 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLE HPC 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | alloy | 1.20.1-1.1 | openSUSE-SU-2026:12114-1 |
| openSUSE Tumbleweed | apptainer | 1.5.3-4.1 | openSUSE-SU-2026:11830-1 |
| openSUSE Tumbleweed | cadvisor | 0.60.5-3.1 | openSUSE-SU-2026:11695-1 |
| openSUSE Tumbleweed | containerized-data-importer1.65 | 1.65.0-3.1 | openSUSE-SU-2026:11731-1 |
| openSUSE Tumbleweed | containerized-data-importer1.66 | 1.66.1-1.1 | openSUSE-SU-2026:11732-1 |
| openSUSE Tumbleweed | distribution | 3.1.1-6.1 | openSUSE-SU-2026:11697-1 |
| openSUSE Tumbleweed | google-osconfig-agent | 20260908.00-1.1 | openSUSE-SU-2026:11743-1 |
| openSUSE Tumbleweed | grafana | 12.4.11-1.1 | openSUSE-SU-2026:11920-1 |
| openSUSE Tumbleweed | hauler | 2.1.0-3.1 | openSUSE-SU-2026:11700-1 |
| openSUSE Tumbleweed | helm | 4.2.4-3.1 | openSUSE-SU-2026:11718-1 |
| openSUSE Tumbleweed | helm3 | 3.21.3-8.1 | openSUSE-SU-2026:11686-1 |
| openSUSE Tumbleweed | kubevirt1.8 | 1.8.4-7.1 | openSUSE-SU-2026:12241-1 |
| openSUSE Tumbleweed | kubevirt1.9 | 1.9.0-3.1 | openSUSE-SU-2026:11752-1 |
| openSUSE Tumbleweed | mcphost | 0.34.0-11.1 | openSUSE-SU-2026:11837-1 |
| openSUSE Tumbleweed | trivy | 0.74.0-4.1 | openSUSE-SU-2026:11713-1 |
| openSUSE Tumbleweed | v2ray-core | 5.54.2-1.1 | openSUSE-SU-2026:11853-1 |
| openSUSE Tumbleweed | warewulf4 | 4.7.1-2.1 | openSUSE-SU-2026:12375-1 |
| openSUSE Leap 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 | openSUSE-SU-2026:22035-1 |
| openSUSE Leap 16.0 | apptainer | 1.5.3-bp160.4.1 | openSUSE-SU-2026:21927-1 |
| openSUSE Leap 16.0 | cadvisor | 0.60.5-bp160.2.1 | openSUSE-SU-2026:21843-1 |
| openSUSE Leap 16.0 | containerized-data-importer1.65 | 1.65.0-160000.3.1 | openSUSE-SU-2026:21824-1 |
| openSUSE Leap 16.0 | distribution | 3.1.1-160000.3.1 | openSUSE-SU-2026:21898-1 |
| openSUSE Leap 16.0 | gh | 2.102.0-bp160.1.1 | openSUSE-SU-2026:22134-1 |
| openSUSE Leap 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | openSUSE-SU-2026:21834-1 |
| openSUSE Leap 16.0 | google-guest-agent | 20260903.01-160000.1.1 | openSUSE-SU-2026:21879-1 |
| openSUSE Leap 16.0 | google-osconfig-agent | 20260911.00-160000.1.1 | openSUSE-SU-2026:21882-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | openSUSE-SU-2026:21897-1 |
| openSUSE Leap 16.0 | hauler | 2.1.0-bp160.3.1 | openSUSE-SU-2026:21841-1 |
| openSUSE Leap 16.0 | helm | 3.21.3-160000.2.1 | openSUSE-SU-2026:21809-1 |
| openSUSE Leap 16.0 | mcphost | 0.34.0-160000.5.1 | openSUSE-SU-2026:21886-1 |
| openSUSE Leap 16.0 | rqlite | 10.6.6-bp160.1.1 | openSUSE-SU-2026:22224-1 |
| openSUSE Leap 16.0 | trivy | 0.74.0-160000.2.1 | openSUSE-SU-2026:21801-1 |
| openSUSE Leap 16.0 | v2ray-core | 5.54.2-bp160.1.1 | openSUSE-SU-2026:21996-1 |
| openSUSE Leap 16.0 | warewulf4 | 4.7.1-bp160.2.1 | openSUSE-SU-2026:22221-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | grpc | No fix yet | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | amazon-cloudwatch-agent | 1.300073.0-r1 | — |
| Wolfi rolling | argo-cd-3.3-compat | 3.3.14-r9 | — |
| Wolfi rolling | aws-otel-collector | 0.50.0-r3 | — |
| Wolfi rolling | bank-vaults-template | 1.33.2-r3 | — |
| Wolfi rolling | blob-csi-1.27 | 1.27.10-r0 | — |
| Wolfi rolling | calico-felix-3.32 +2 | 3.32.2-r3 | — |
| Wolfi rolling | calico-goldmane-3.31 | 3.31.7-r3 | — |
| Wolfi rolling | cerbos | 0.55.0-r7 | — |
| Wolfi rolling | cilium-1.19-operator-generic | 1.19.7-r7 | — |
| Wolfi rolling | cloud-provider-vsphere | 1.37.0-r3 | — |
| Wolfi rolling | cloudflared | 2026.9.1-r0 | — |
| Wolfi rolling | dapr-daprd-1.17 +5 | 1.17.13-r7 | — |
| Wolfi rolling | dockerd-28 | 28.5.2-r39 | — |
| Wolfi rolling | dogstatsd-7.77 +3 | 7.77.3-r25 | — |
| Wolfi rolling | dogstatsd-7.78 +3 | 7.78.4-r20 | — |
| Wolfi rolling | dogstatsd-7.79 +3 | 7.79.2-r18 | — |
| Wolfi rolling | dogstatsd-7.80 +7 | 7.80.4-r16 | — |
| Wolfi rolling | dogstatsd-7.81 +4 | 7.81.3-r5 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r31 | — |
| Wolfi rolling | flyte | 1.16.9-r0 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25 | 1.25.2-r17 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25-compat | 1.25.2-r18 | — |
| Wolfi rolling | gitlab-pages-19.1 | 19.1.8-r0 | — |
| Wolfi rolling | gitlab-runner-helper-19.1 | 19.1.5-r0 | — |
| Wolfi rolling | grafana-mimir-3.0 | 3.0.9-r4 | — |
| Wolfi rolling | grafana-mimir-3.1-query-tee-3.1 | 3.1.6-r0 | — |
| Wolfi rolling | helm-3 | 3.22.0-r0 | — |
| Wolfi rolling | hydra | 26.2.0-r26 | — |
| Wolfi rolling | ipfs-cluster | 1.1.6-r18 | — |
| Wolfi rolling | istioctl-1.29 | 1.29.7-r3 | — |
| Wolfi rolling | k3s-1.32 +20 | No fix yet | — |
| Wolfi rolling | k8sgpt | 0.4.38-r3 | — |
| Wolfi rolling | k8ssandra-client | 0.9.1-r2 | — |
| Wolfi rolling | knative-eventing-1.21-jobsink +1 | 1.21.4-r10 | — |
| Wolfi rolling | knative-eventing-1.22-jobsink | 1.22.2-r8 | — |
| Wolfi rolling | knative-serving-1.21-activator | 1.21.3-r7 | — |
| Wolfi rolling | kserve-localmodel | 0.20.0-r7 | — |
| Wolfi rolling | kubeflow-pipelines-apiserver | 2.17.2-r4 | — |
| Wolfi rolling | kubeflow-profile-controller | 1.10.0-r36 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 6.3.0-r11 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 2.2.1-r12 | — |
| Wolfi rolling | kubescape-operator | 0.2.172-r2 | — |
| Wolfi rolling | kuma-dp-2.13 | 2.13.11-r0 | — |
| Wolfi rolling | kyverno-1.17 +1 | 1.17.2-r35 | — |
| Wolfi rolling | kyverno-init-container-1.18 | 1.18.2-r15 | — |
| Wolfi rolling | litestream | 0.5.17-r3 | — |
| Wolfi rolling | lvm-driver | 1.10.1-r1 | — |
| Wolfi rolling | mcp-grafana | 1.6.2-r0 | — |
| Wolfi rolling | mps-control-daemon | 0.20.0-r4 | — |
| Wolfi rolling | opentofu-1.12 | 1.12.6-r6 | — |
| Wolfi rolling | rancher-agent-2.13 | 2.13.9-r4 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.8.2-r9 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r42 | — |
| Wolfi rolling | spicedb-operator | 1.27.0-r0 | — |
| Wolfi rolling | tekton-pipelines-webhook-1.11 +1 | 1.11.1-r20 | — |
| Wolfi rolling | tempo-3.0 +1 | 3.0.3-r6 | — |
| Wolfi rolling | trillian-logsigner | 1.7.3-r19 | — |
| Wolfi rolling | vcluster | 0.37.1-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | google.golang.org/grpc | < 1.83.1 | 1.83.1 | GHSA-qc2q-p7wx-3px3 |
Advisories 50
- SUSE-SU-2026:24709-1 Security update for elemental-operator, elemental-system-agent, elemental-toolkit SUSE / openSUSE Security Updates · Nov 13, 2026
- SUSE-SU-2026:24645-1 Security update for elemental, elemental-register, elemental-system-agent, elemental-toolkit SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5203-1 Security update for alloy SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5202-1 Security update for distribution SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5167-1 Security update for kubevirt SUSE / openSUSE Security Updates · Nov 11, 2026
- openSUSE-SU-2026:22221-1 Security update for warewulf4 SUSE / openSUSE Security Updates · Nov 4, 2026
- openSUSE-SU-2026:22224-1 Security update for rqlite SUSE / openSUSE Security Updates · Nov 4, 2026
- openSUSE-SU-2026:12375-1 warewulf4-4.7.1-2.1 on GA media SUSE / openSUSE Security Updates · Nov 1, 2026
- openSUSE-SU-2026:12241-1 kubevirt1.8-container-disk-1.8.4-7.1 on GA media SUSE / openSUSE Security Updates · Oct 24, 2026
- openSUSE-SU-2026:22134-1 Security update for gh SUSE / openSUSE Security Updates · Oct 20, 2026
- SUSE-SU-2026:24150-1 Security update for amazon-ecs-init SUSE / openSUSE Security Updates · Oct 16, 2026
- openSUSE-SU-2026:12114-1 alloy-1.20.1-1.1 on GA media SUSE / openSUSE Security Updates · Oct 14, 2026
- SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls SUSE / openSUSE Security Updates · Oct 13, 2026
- openSUSE-SU-2026:22035-1 Security update for amazon-ecs-init SUSE / openSUSE Security Updates · Oct 9, 2026
- SUSE-SU-2026:4444-1 Security update for terraform-provider-susepubliccloud SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2026:21996-1 Security update for v2ray-core SUSE / openSUSE Security Updates · Oct 1, 2026
- openSUSE-SU-2026:11920-1 grafana-12.4.11-1.1 on GA media SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4388-1 Security update for amazon-cloudwatch-agent SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4389-1 Security update for terraform-provider-susepubliccloud SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:23730-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23688-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23546-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23548-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23708-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 28, 2026
- SUSE-SU-2026:23729-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 28, 2026
- SUSE-SU-2026:23863-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23864-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23852-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23855-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23831-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23736-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23739-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 27, 2026
- openSUSE-SU-2026:21927-1 Security update for apptainer SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21897-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21898-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21886-1 Security update for mcphost SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21879-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 25, 2026
- openSUSE-SU-2026:21882-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 25, 2026
- SUSE-SU-2026:4308-1 Security update for apptainer SUSE / openSUSE Security Updates · Sep 24, 2026
- SUSE-SU-2026:4293-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 23, 2026
- SUSE-SU-2026:4292-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 23, 2026
- openSUSE-SU-2026:11853-1 golang-github-v2fly-v2ray-core-5.54.2-1.1 on GA media SUSE / openSUSE Security Updates · Sep 23, 2026
- openSUSE-SU-2026:11837-1 mcphost-0.34.0-11.1 on GA media SUSE / openSUSE Security Updates · Sep 22, 2026
- openSUSE-SU-2026:11830-1 apptainer-1.5.3-4.1 on GA media SUSE / openSUSE Security Updates · Sep 22, 2026
- SUSE-SU-2026:4270-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 21, 2026
- SUSE-SU-2026:4272-1 Security update for google-guest-agent SUSE / openSUSE Security Updates · Sep 21, 2026
- SUSE-SU-2026:4206-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 16, 2026
- SUSE-SU-2026:4125-1 Security update for azure-storage-azcopy SUSE / openSUSE Security Updates · Sep 15, 2026
- openSUSE-SU-2026:21834-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 15, 2026
- openSUSE-SU-2026:21841-1 Security update for hauler SUSE / openSUSE Security Updates · Sep 15, 2026
References
- https://github.com/grpc/grpc-go/security/advisories/GHSA-qc2q-p7wx-3px3
- https://github.com/grpc/grpc-go/pull/9332
- https://github.com/grpc/grpc-go/pull/9335
- https://github.com/grpc/grpc-go/commit/db9482836c298f234c896cf82ab68cafc78237f8
- https://github.com/grpc/grpc-go/commit/ebba6f3f1b206e2b4dc4d1d5a96d18430302c2fe
- https://github.com/grpc/grpc-go/releases/tag/v1.83.1