Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563). - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603). - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889). - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762). - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926). Bug fixes: - Update to version 20260402.00 (bsc#1257010). - Update to version 20250506.01 (bsc#1243254, bsc#1243505). - Install google_metadata_script_runner_adapt script (bsc#1245759). - Add -buildmode=pie to go build command line (bsc#1239944). - Re-enable binary stripping and debuginfo (bsc#1210938).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563). - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603). - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889). - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762). - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926). Bug fixes: - Update to version 20260402.00 (bsc#1257010). - Update to version 20250506.01 (bsc#1243254, bsc#1243505). - Install google_metadata_script_runner_adapt script (bsc#1245759). - Add -buildmode=pie to go build command line (bsc#1239944). - Re-enable binary stripping and debuginfo (bsc#1210938).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1210938
- https://bugzilla.suse.com/1234563
- https://bugzilla.suse.com/1236533
- https://bugzilla.suse.com/1239334
- https://bugzilla.suse.com/1239944
- https://bugzilla.suse.com/1243254
- https://bugzilla.suse.com/1243505
- https://bugzilla.suse.com/1245759
- https://bugzilla.suse.com/1253889
- https://bugzilla.suse.com/1257010
- https://bugzilla.suse.com/1260264
- https://bugzilla.suse.com/1262926
- https://bugzilla.suse.com/1265762
- https://bugzilla.suse.com/1266171
- https://bugzilla.suse.com/1266603
- https://www.suse.com/security/cve/CVE-2023-45288
- https://www.suse.com/security/cve/CVE-2024-45337
- https://www.suse.com/security/cve/CVE-2025-22868
- https://www.suse.com/security/cve/CVE-2025-22869
- https://www.suse.com/security/cve/CVE-2025-58181
- https://www.suse.com/security/cve/CVE-2026-33186
- https://www.suse.com/security/cve/CVE-2026-33814
- https://www.suse.com/security/cve/CVE-2026-34986
- https://www.suse.com/security/cve/CVE-2026-39821
- https://www.suse.com/security/cve/CVE-2026-39827
- https://www.suse.com/security/cve/CVE-2026-39828
- https://www.suse.com/security/cve/CVE-2026-39829
- https://www.suse.com/security/cve/CVE-2026-39830
- https://www.suse.com/security/cve/CVE-2026-39831
- https://www.suse.com/security/cve/CVE-2026-39832
- https://www.suse.com/security/cve/CVE-2026-39833
- https://www.suse.com/security/cve/CVE-2026-39834
- https://www.suse.com/security/cve/CVE-2026-39835
- https://www.suse.com/security/cve/CVE-2026-42508
- https://www.suse.com/security/cve/CVE-2026-46595
- https://www.suse.com/security/cve/CVE-2026-46597
- https://www.suse.com/security/cve/CVE-2026-46598
- https://www.suse.com/support/update/announcement/2026/suse-su-20262581-1/