openSUSE-SU-2026:22078-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22078-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22078-1
- Upstream
- Related
- Published
- 2026-10-09T12:48:26Z
- Modified
- 2026-10-19T17:23:12Z
- Summary
- Security update for google-osconfig-agent
- Details
-
This update for google-osconfig-agent fixes the following issue:
- CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672).
Changes for google-osconfig-agent:
- Update to version 20260928.01
- scalibr linux new metadata support (#1038)
- from version 20260928.00
- Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055)
- from version 20260923.03
- Fix os/snap extractor usage (#1053)
- Update to version 20260918.01
- bump grpc package to new version (#1057)
- from version 20260918.00
- bump some dependencies across few modules (#1056)
- Remove stale Go module version overrides in _service file
- References