SUSE-SU-2026:22128-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-202622128-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22128-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:22128-1
Upstream
CVE (6)
Related
Published
2026-06-15T14:28:51Z
Modified
2026-06-17T18:24:36Z
Summary
Security update for google-guest-agent
Details

This update for google-guest-agent fixes the following issues:

Changes in google-guest-agent:

Update to version 20260430.00

  • Update OWNERS (#609)
  • Update THIRD_PARTY_LICENSES to be package specific location. (#608)
  • Update dependencies and go version to 1.26.2 (#607) (bsc#1265762, CVE-2026-33814)
  • Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604) (bsc#1260264, CVE-2026-33186)
  • Backport oslogin changes for sles16 to legacy agent (#603)
  • Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
  • Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
  • Actually finally fix the RPM spec (#601)
  • Correct guest telemetry build target (#600)
  • Add packaging for new telemetry extension (#599)
  • Implement new scheduled job for routes monitor (#598)
  • Add packaging changes for locally bundled extensions feature support (#593)
  • Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)
  • Disable certificates when security keys are enabled (#588)
  • Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)
  • Source the contents of /var/google-users.d config files. (#586)
  • Force remove core plugin configuration for windows (#587)
  • network: force address manager to always consolidate the OS state (#585)
  • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583) (bsc#1239334, CVE-2025-22869, bsc#1253889, CVE-2025-58181)
  • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
  • Add Tyler, Saswat, Hank to OWNERS (#577)
  • Honor core plugin setting on windows package update (#576)
  • Restart agent if core plugin is disabled (#575)
  • Add extra debug logging around toggling OS Login (#572)
  • Update go version to 1.25 (#565)
  • Add compat adapt script to windows in agent sysprep (#569)
  • Fix adapt to use more portable shebang line (#567)
  • Remove routes script from packaging (#566)
  • Update adapt script to run on startup/shutdown both (#561)
  • Update agent_uninstall.ps1 (#558)
  • Stop core plugin before removing agent package (#554)
  • Startup scripts should start after agent manager instead (#553)
  • Update presets and install dependencies on systemd units (#552)
  • Ensure agent service is disabled (#551)
  • Disable legacy agent to enable core plugin (#550)
  • Final fix for RHEL packaging for routes setup (#549)
  • Fix RHEL packaging for routes scripts (#548)
  • Packaging changes to include routes script installation (#542)
  • Update CLI name in packaging (#543)
  • systemd should manage only the main process (#544)
  • from version 20260424.00

    • Bring topic-stable up to latest point. (#606)
    • Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)
    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20260423.01

    • Update THIRD_PARTY_LICENSES to be package specific location. (#608)
  • from version 20260423.00

    • Update dependencies and go version to 1.26.2 (#607)
    • Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)
    • Backport oslogin changes for sles16 to legacy agent (#603)
    • Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
    • Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
    • Actually finally fix the RPM spec (#601)
    • Correct guest telemetry build target (#600)
    • Add packaging for new telemetry extension (#599)
    • Implement new scheduled job for routes monitor (#598)
    • Add packaging changes for locally bundled extensions feature support (#593)
    • Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)
    • Disable certificates when security keys are enabled (#588)
    • Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)
    • Source the contents of /var/google-users.d config files. (#586)
    • Force remove core plugin configuration for windows (#587)
    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20260422.01

    • Bring topic-stable up to latest point. (#606)
    • Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)
    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20260422.00

    • Update dependencies and go version to 1.26.2 (#607)
    • Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)
    • Backport oslogin changes for sles16 to legacy agent (#603)
    • Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
    • Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
    • Actually finally fix the RPM spec (#601)
    • Correct guest telemetry build target (#600)
    • Add packaging for new telemetry extension (#599)
    • Implement new scheduled job for routes monitor (#598)
    • Add packaging changes for locally bundled extensions feature support (#593)
    • Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)
    • Disable certificates when security keys are enabled (#588)
    • Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)
    • Source the contents of /var/google-users.d config files. (#586)
    • Force remove core plugin configuration for windows (#587)
    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20260421.00

    • Bring topic-stable up to latest point. (#606)
    • Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)
    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20260414.00

    • Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)
  • Bump Go API version to 1.26

  • Fix crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926, CVE-2026-34986)

  • Update to version 20260402.00: (bsc#1257010)

    • Backport oslogin changes for sles16 to legacy agent (#603)
    • Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
    • Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
    • Actually finally fix the RPM spec (#601)
    • Correct guest telemetry build target (#600)
    • Add packaging for new telemetry extension (#599)
    • Implement new scheduled job for routes monitor (#598)
    • Add packaging changes for locally bundled extensions feature support (#593)
    • Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)
    • Disable certificates when security keys are enabled (#588)
    • Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)
  • Update to version 20260108.00

    • Source the contents of /var/google-users.d config files. (#586)
  • Update to version 20251223.00

    • Force remove core plugin configuration for windows (#587)
    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251218.01

    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251218.00

    • Force remove core plugin configuration for windows (#587)
    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251216.00

    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251215.00

    • Force remove core plugin configuration for windows (#587)
    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251210.00

    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251209.00

    • Force remove core plugin configuration for windows (#587)
  • Update to version 20251208.00

    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251206.00

    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251205.00

    • network: force address manager to always consolidate the OS state (#585)
    • Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • Update to version 20251120.01

    • fix start mode for windows on stable release (#584)
    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251120.00

    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251117.00

    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251115.00

    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251108.00

    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251107.01

    • Don't delete the authorized_keys file when an empty key list is passed to updateAuthorizedKeysFile (#582)
    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251031.00

    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251030.02

    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251030.01

    • Update agent_uninstall.ps1 (#558) (#580)
    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251030.00

    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251011.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251009.01

    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251009.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • Update to version 20251007.00

    • Add Tyler, Saswat, Hank to OWNERS (#577)
    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251006.01

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20251006.00

    • Honor core plugin setting on windows package update (#576)
    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20251005.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250930.01

    • Honor core plugin setting on windows package update (#576)
  • from version 20250929.01

    • Restart agent if core plugin is disabled (#575)
    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250929.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250926.00

    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250924.02

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250924.01

    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250924.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • Update to version 20250923.01

    • Add extra debug logging around toggling OS Login (#572)
    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250923.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250921.00

    • Add extra debug logging around toggling OS Login (#572)
  • from version 20250920.01

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250920.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250918.01

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250917.01

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250917.00

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250916.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250915.00

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • Disable missing daemon google_guest_agent_manager referenced by google-startup-scripts.service

  • Update to version 20250908.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250907.00

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250905.01

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250905.00

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250902.00

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • Build and install new gce_workload_cert_refresh binary

  • Fix installation source of google_metadata_script_runner_adapt script

  • Install new systemd service file

    • gce-workload-cert-refresh.service
  • Update to version 20250901.00

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250831.03

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250831.02

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250831.01

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250831.00

    • Update go version to 1.25 (#565)
    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250830.02

    • Update go version for stable branch to 1.25 (#571)
    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250830.01

    • Update go version to 1.25 (#565)
  • from version 20250830.00

    • Add compat adapt script to windows in agent sysprep (#569)
    • Fix adapt to use more portable shebang line (#567)
    • Remove routes script from packaging (#566)
    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250828.00

    • Add adapt script in stable branch as per #569 (#570)
    • Backport fix from #567 to stable branch (#568)
  • from version 20250826.00

    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250821.01

    • Remove routes script from packaging (#566)
  • Update to version 20250718.00

    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • Update to version 20250709.02

    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250709.01

    • Update adapt script to run on startup/shutdown both (#561)
    • Update agent_uninstall.ps1 (#558)
    • Stop core plugin before removing agent package (#554)
    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
  • from version 20250709.00

    • Revert compat behavior and call known binary directly (#560)
    • Revert compat behavior and call known binary directly (#559)
    • Build rollforward package to re-enable original agent and disable core plugin (#557)
  • from version 20250702.00

    • Update adapt script to run on startup/shutdown both (#561)
  • from version 20250701.01

    • Update agent_uninstall.ps1 (#558)
  • from version 20250701.00

    • Stop core plugin before removing agent package (#554)
  • from version 20250628.00

    • Startup scripts should start after agent manager instead (#553)
    • Update presets and install dependencies on systemd units (#552)
    • Ensure agent service is disabled (#551)
  • from version 20250626.00

    • Disable legacy agent to enable core plugin (#550)
    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
    • startup script: wrap compatibility decision into its own scripts (#538)
    • Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
  • from version 20250625.00

    • prepare stable release.
  • Install google_metadata_script_runner_adapt script (bsc#1245759)

  • Update to version 20250624.00

    • Final fix for RHEL packaging for routes setup (#549)
    • Fix RHEL packaging for routes scripts (#548)
    • Packaging changes to include routes script installation (#542)
    • Update CLI name in packaging (#543)
    • systemd should manage only the main process (#544)
    • startup script: wrap compatibility decision into its own scripts (#538)
    • Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
  • from version 20250611.01

    • prepare stable release.
  • from version 20250611.00

    • startup script: wrap compatibility decision into its own scripts (#538)
    • Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
  • from version 20250609.00

    • prepare stable release.
  • from version 20250605.00

    • startup script: wrap compatibility decision into its own scripts (#538)
    • Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
    • Make sure agent added connections are activated by NM (#534)
    • wrap NSS cache refresh in a goroutine (#533)
    • Wicked: Only reload interfaces for which configurations are written or changed. (#524)
    • Add AuthorizedKeysCompat to windows packaging (#530)
    • Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
    • Update guest-logging-go dependency (#526)
    • Add 'created-by' metadata, and pass it as option to logging library (#508)
    • Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
    • Re-enable disabled services if the core plugin was enabled (#522)
    • Enable guest services on package upgrade (#519)
    • oslogin: Correctly handle newlines at the end of modified files (#520)
    • Fix core plugin path (#518)
    • Fix package build issues (#517)
    • Fix dependencies ran go mod tidy -v (#515)
    • Fix debian build path (#514)
    • Bundle compat metadata script runner binary in package (#513)
    • Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
    • Update startup/shutdown services to launch compat manager (#503)
    • Bundle new gce metadata script runner binary in agent package (#502)
    • Revert "Revert bundling new binaries in the package (#509)" (#511)
  • Update to version 20250604.00

    • Preparing stable build.
  • from version 20250602.00

    • Make sure agent added connections are activated by NM (#534)
    • wrap NSS cache refresh in a goroutine (#533)
    • Wicked: Only reload interfaces for which configurations are written or changed. (#524)
    • Add AuthorizedKeysCompat to windows packaging (#530)
    • Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
    • Update guest-logging-go dependency (#526)
    • Add 'created-by' metadata, and pass it as option to logging library (#508)
    • Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
    • Re-enable disabled services if the core plugin was enabled (#522)
    • Enable guest services on package upgrade (#519)
    • oslogin: Correctly handle newlines at the end of modified files (#520)
    • Fix core plugin path (#518)
    • Fix package build issues (#517)
    • Fix dependencies ran go mod tidy -v (#515)
    • Fix debian build path (#514)
    • Bundle compat metadata script runner binary in package (#513)
    • Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
    • Update startup/shutdown services to launch compat manager (#503)
    • Bundle new gce metadata script runner binary in agent package (#502)
    • Revert "Revert bundling new binaries in the package (#509)" (#511)
  • from version 20250521.00

    • Preparing stable build.
  • from version 20250515.00

    • Make sure agent added connections are activated by NM (#534)
    • wrap NSS cache refresh in a goroutine (#533)
    • Wicked: Only reload interfaces for which configurations are written or changed. (#524)
    • Add AuthorizedKeysCompat to windows packaging (#530)
    • Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
    • Update guest-logging-go dependency (#526)
    • Add 'created-by' metadata, and pass it as option to logging library (#508)
    • Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
    • Re-enable disabled services if the core plugin was enabled (#522)
    • Enable guest services on package upgrade (#519)
    • oslogin: Correctly handle newlines at the end of modified files (#520)
    • Fix core plugin path (#518)
    • Fix package build issues (#517)
    • Fix dependencies ran go mod tidy -v (#515)
    • Fix debian build path (#514)
    • Bundle compat metadata script runner binary in package (#513)
    • Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
    • Update startup/shutdown services to launch compat manager (#503)
    • Bundle new gce metadata script runner binary in agent package (#502)
    • Revert "Revert bundling new binaries in the package (#509)" (#511)
  • Update to version 20250508.00

    • Preparing stable build.
  • from version 20250506.01 (bsc#1243254, bsc#1243505)

  • Update to version 20250411.00

    • Re-enable disabled services if the core plugin was enabled (#521)
  • Add -buildmode=pie to go build command line (bsc#1239944)

References

Affected packages

SUSE:Linux Enterprise Server 16.0 / google-guest-agent

Package

Name
google-guest-agent
Purl
pkg:rpm/suse/google-guest-agent&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260430.00-160000.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "google-guest-agent":  "20260430.00-160000.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22128-1.json"

SUSE:Linux Enterprise Server for SAP applications 16.0 / google-guest-agent

Package

Name
google-guest-agent
Purl
pkg:rpm/suse/google-guest-agent&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260430.00-160000.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "google-guest-agent":  "20260430.00-160000.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22128-1.json"