p PatchFirst

SUSE-SU-2026:3432-1

SUSE-SU-2026:3432-1 · Security update for google-osconfig-agent

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603). - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input containing invalid UTF-8 bytes can lead to infinite loop (bsc#1272118).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • google-osconfig-agent SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 20260615.01-150000.1.60.1

    Update to 20260615.01-150000.1.60.1

  • google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP4

    Affected ranges
    • ECOSYSTEM: < 20260615.01-150000.1.60.1

    Update to 20260615.01-150000.1.60.1

  • google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP5

    Affected ranges
    • ECOSYSTEM: < 20260615.01-150000.1.60.1

    Update to 20260615.01-150000.1.60.1

  • google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP6

    Affected ranges
    • ECOSYSTEM: < 20260615.01-150000.1.60.1

    Update to 20260615.01-150000.1.60.1

  • google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP7

    Affected ranges
    • ECOSYSTEM: < 20260615.01-150000.1.60.1

    Update to 20260615.01-150000.1.60.1

Original sources

Check your server →