SUSE-SU-2026:4661-1
SUSE-SU-2026:4661-1 · Security update for google-osconfig-agent
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) - Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) - Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
google-osconfig-agent SUSE:Linux Enterprise Micro 5.5
- Affected ranges
- ECOSYSTEM: < 20260928.01-150000.1.70.1
Update to 20260928.01-150000.1.70.1
google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP4
- Affected ranges
- ECOSYSTEM: < 20260928.01-150000.1.70.1
Update to 20260928.01-150000.1.70.1
google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP5
- Affected ranges
- ECOSYSTEM: < 20260928.01-150000.1.70.1
Update to 20260928.01-150000.1.70.1
google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP6
- Affected ranges
- ECOSYSTEM: < 20260928.01-150000.1.70.1
Update to 20260928.01-150000.1.70.1
google-osconfig-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP7
- Affected ranges
- ECOSYSTEM: < 20260928.01-150000.1.70.1
Update to 20260928.01-150000.1.70.1