{"id":"SUSE-SU-2026:24374-1","summary":"Security update for google-osconfig-agent","details":"This update for google-osconfig-agent fixes the following issues:\n\n- CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of\n  service (bsc#1284870).\n- CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285283).\n- CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time\n  complexity in unpack handler and can lead to DoS (bsc#1285135).\n\nChanges for google-osconfig-agent:\n\n- Update to version 20261015.00\n * Add scalibr os benchmarks (#1044)\n","modified":"2026-10-27T17:23:17.398946903Z","published":"2026-10-26T06:59:50Z","related":["CVE-2026-61801","CVE-2026-78669","CVE-2026-95838"],"upstream":["CVE-2026-61801","CVE-2026-78669","CVE-2026-95838"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624374-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284870"},{"type":"REPORT","url":"https://bugzilla.suse.com/1285135"},{"type":"REPORT","url":"https://bugzilla.suse.com/1285283"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-61801"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78669"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-95838"}],"affected":[{"package":{"name":"google-osconfig-agent","ecosystem":"SUSE:Linux Micro 6.0","purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE%20Linux%20Micro%206.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20261015.00-159998.1.1"}]}],"ecosystem_specific":{"binaries":[{"google-osconfig-agent":"20261015.00-159998.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24374-1.json"}}],"schema_version":"1.9.2"}