SUSE-SU-2026:4661-1
Security update for google-osconfig-agent
Published Oct 14, 2026 · updated Oct 14, 2026
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) - Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) - Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209)
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · OSV.dev
Detected
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state du
Oct 14, 2026 · OSV.dev
Fix available
google-osconfig-agent fixed in 20260928.01-150000.1.70.1; google-osconfig-agent fixed in 20260928.01-150000.1.70.1; google-osconfig-agent fixed in 20260928.01-150000.1.70.1; google-osconfig-agent fixed in 20260928.01-150000.1.70.1
Oct 14, 2026 · OSV.dev
Fix available
google-osconfig-agent fixed in 20260928.01-150000.1.70.1
Oct 14, 2026 · OSV.dev
Updated
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state du
Affected
- SUSE:Linux Enterprise Micro 5.5 google-osconfig-agent0 → 20260928.01-150000.1.70.1
- SUSE:Linux Enterprise Module for Public google-osconfig-agent0 → 20260928.01-150000.1.70.1