SUSE-SU-2026:23876-1
SUSE-SU-2026:23876-1 · Security update for google-osconfig-agent
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278597). Changes for google-osconfig-agent: - Update to version 20260911.00 * Add support for all possible SCALIBR os extractor for linux (#1052)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
google-osconfig-agent SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 20260911.00-1.1
Update to 20260911.00-1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623876-1/
- https://bugzilla.suse.com/1276722
- https://bugzilla.suse.com/1278597
- https://www.suse.com/security/cve/CVE-2026-41178
- https://www.suse.com/security/cve/CVE-2026-56854
- https://www.suse.com/security/cve/CVE-2026-56855
- https://www.suse.com/security/cve/CVE-2026-78662
- https://osv.dev/vulnerability/SUSE-SU-2026:23876-1