Package: google-guest-agent (20260803.00-2.1) Other Packages Related to google-guest-agent:
Package not available
Package not available
Package not available
[google-guest-configs ]
Google Cloud Guest Configs
[google-guest-oslogin ] (>= 20231003)
Google Cloud Guest OS Login
Package not available
Download google-guest-agent Package file paths (16) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/gce_workload_cert_refresh /usr/bin/google_guest_agent /usr/bin/google_metadata_script_runner /usr/bin/google_metadata_script_runner_adapt /usr/lib/systemd/system/gce-workload-cert-refresh.service /usr/lib/systemd/system/google-guest-agent.service /usr/lib/systemd/system/google-shutdown-scripts.service /usr/lib/systemd/system/google-startup-scripts.service /usr/sbin/rcgce-workload-cert-refresh /usr/sbin/rcgoogle-guest-agent /usr/sbin/rcgoogle-shutdown-scripts /usr/sbin/rcgoogle-startup-scripts /usr/share/google-guest-agent /usr/share/google-guest-agent/instance_configs.cfg /usr/share/licenses/google-guest-agent /usr/share/licenses/google-guest-agent/LICENSE Field source: openSUSE Tumbleweed OSS
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-84304 ] Published: Sep 1, 2026, 6:19:10 PM UTC
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byt
High(8.7) Affected Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Affected · Fixed: 20260903.01-1.1
nvd · google-guest-agent · opensuse · tumbleweed
[CVE-2026-56854 ] Published: Aug 28, 2026, 2:47:45 PM UTC
golang-go.crypto: CVE-2026-56854
High(8.1) Affected Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Affected · Fixed: 20260903.00-1.1
dsa · google-guest-agent · opensuse · tumbleweed
[CVE-2026-78669 ] Published: Aug 13, 2026, 9:43:54 PM UTC
Go vulnerabilities
Critical(9.1) Affected Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Affected · Fixed: 20261015.00-1.1
usn · google-guest-agent · opensuse · tumbleweed
Fixed and unaffected versions (6) CVE Severity Version impact [CVE-2026-56852 ] Published: Jul 14, 2026, 5:29:56 PM UTC
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
High(7.5) Fixed Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Fixed · Fixed: 20260529.00-4.1
nvd · google-guest-agent · opensuse · tumbleweed
[CVE-2026-39827 ] Published: May 21, 2026, 10:00:00 PM UTC
An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users.
Medium(6.5) Fixed Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Fixed · Fixed: 20260529.00-2.1
nvd · google-guest-agent · opensuse · tumbleweed
[CVE-2026-34986 ] Published: Apr 3, 2026, 3:28:56 AM UTC
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token
High(7.5) Fixed Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Fixed · Fixed: 20260402.00-2.1
nvd · google-guest-agent · opensuse · tumbleweed
[CVE-2025-22868 ] Published: Feb 26, 2025, 12:00:00 AM UTC
golang-golang-x-oauth2: CVE-2025-22868
High(7.5) Fixed Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Fixed · Fixed: 20250116.00-3.1
dsa · google-guest-agent · opensuse · tumbleweed
[CVE-2024-45337 ] Published: Dec 11, 2024, 6:55:58 PM UTC
Google Guest Agent vulnerability
High(8.2) Fixed Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Fixed · Fixed: 20250327.01-1.1
usn · google-guest-agent · opensuse · tumbleweed
[CVE-2021-38297 ] Published: Oct 7, 2021, 12:00:00 AM UTC
UBUNTU-CVE-2021-38297
Critical(9.8) Fixed Details (1) 20260803.00-2.1 · x86_64 · tumbleweed
Fixed · Fixed: 20230221.00-2.1
pypi · google-guest-agent · opensuse · tumbleweed
Last synced: Oct 28, 2026, 6:35:56 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
20260803.00-2.1 / x86_64 Observed Sep 1, 2026 sha512 f028776b6d0b…aab81ff0Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha512): f028776b6d0b34a3fcc5b16dbd9b0f43b9560966ded02cb93d00f16d21158448c43062dd8040616ca67406bd2af1d9b0c0b95fc238e17442d68a7cf6aab81ff0
Field source: openSUSE Tumbleweed OSS
