VDB

SUSE-SU-2025%3A20746-1

SUSE-SU-2025%3A20746-1 PUBLISHED CVSS 8.699999809265137 HIGH

Record from OSV · Published September 12, 2025

This update for google-osconfig-agent fixes the following issues: Update to version 20250416.02 (bsc#1244304, bsc#1244503) * defaultSleeper: tolerate 10% difference to reduce test flakiness (#810) * Add output of some packagemanagers to the testdata (#808) From version 20250416.01: * Refactor OS Info package (#809) From version 20250416.00: * Report RPM inventory as YUM instead of empty SoftwarePackage when neither Zypper nor YUM are installed. (#805) From version 20250414.00: * Update hash computation algorithm (#799) Update to version 20250320.00: * Bump github.com/envoyproxy/protoc-gen-validate from 1.1.0 to 1.2.1 (#797) * Bump go.opentelemetry.io/otel/sdk/metric from 1.32.0 to 1.35.0 (#793) * Bump cel.dev/expr from 0.18.0 to 0.22.0 (#792) * Bump github.com/golang/glog from 1.2.3 to 1.2.4 in the go_modules group (#785) * Bump cloud.google.com/go/logging from 1.12.0 to 1.13.0 (#774) * Add tests for retryutil package. (#795) * Update OWNERS (#794) * Use separate counters for pre- and post-patch reboots. (#788) * Update owners (#789) * Fix the vet errors for contants in logging (#786) * change available package check (#783) * Fix Inventory reporting e2e tests. (#782) * fix e2e tests (#781) - Add -buildmode=pie to go build command line (bsc#1239948)

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
google-osconfig-agentSUSE:Linux Micro 6.120250416.02-slfo.1.1_1.1, 20250416.02-slfo.1.1

Risk scores

CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
SUSE:Linux Micro 6.1google-osconfig-agent0, 0

Timeline

  • Sep 12, 2025 CVE Published
  • Mar 23, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln SUSE-SU-2025%3A20746-1
vulnetix vdb fixes SUSE-SU-2025%3A20746-1

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2025%253A20746-1/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›