SUSE-SU-2026:24131-1
Security update for google-osconfig-agent
Published Oct 9, 2026 · updated Oct 15, 2026
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: - Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056)
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 9, 2026 · OSV.dev
Detected
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: - Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state
Oct 15, 2026 · OSV.dev
Fix available
google-osconfig-agent fixed in 20260928.01-159998.1.1
Oct 15, 2026 · OSV.dev
Fix available
google-osconfig-agent fixed in 20260928.01-159998.1.1
Oct 15, 2026 · OSV.dev
Updated
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: - Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state
Affected
- SUSE:Linux Micro 6.0 google-osconfig-agent0 → 20260928.01-159998.1.1