SUSE-SU-2026:2581-1: google-guest-agent&distro=SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:2581-1 is a vulnerability in google-guest-agent&distro=SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 22 · Downstream 0 · Related 22Timeline
- 23-06-2026PublishedVulnerability first disclosed.
- 24-06-2026Last modifiedVulnerability information updated.
Description
Security update for google-guest-agent This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563). - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603). - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334). - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889). - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762). - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264). - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926). Bug fixes: - Update to version 20260402.00 (bsc#1257010). - Update to version 20250506.01 (bsc#1243254, bsc#1243505). - Install google_metadata_script_runner_adapt script (bsc#1245759). - Add -buildmode=pie to go build command line (bsc#1239944). - Re-enable binary stripping and debuginfo (bsc#1210938).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- google-guest-agent&distro=SUSE Linux Enterprise Module for Public Cloud 12< 20260529.00-1.61.1
1 vendor · 1 product