FlawAtlas
Search the atlas
SUSE-SU-2026:2581-1 Not scored

Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563). - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603). - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889). - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762). - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926). Bug fixes: - Update to version 20260402.00 (bsc#1257010). - Update to version 20250506.01 (bsc#1243254, bsc#1243505). - Install google_metadata_script_runner_adapt script (bsc#1245759). - Add -buildmode=pie to go build command line (bsc#1239944). - Re-enable binary stripping and debuginfo (bsc#1210938).

Exploit probability Not scored
Published June 23, 2026
Required by Not available
Last source change June 24, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Public Cloud 12 google-guest-agent

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:2581-1

This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563). - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603). - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889). - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762). - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926). Bug fixes: - Update to version 20260402.00 (bsc#1257010). - Update to version 20250506.01 (bsc#1243254, bsc#1243505). - Install google_metadata_script_runner_adapt script (bsc#1245759). - Add -buildmode=pie to go build command line (bsc#1239944). - Re-enable binary stripping and debuginfo (bsc#1210938).

View original source

05 / REFERENCES

Further evidence