Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1005-1

Опубликовано: 25 мар. 2025
Источник: suse-cvrf

Описание

Security update for google-guest-agent

This update for google-guest-agent fixes the following issues:

  • CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239197)

Список пакетов

Image SLES15-SP3-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP3-HPC-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP3-SAP-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP3-SAPCAL-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-CHOST-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-HPC-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-HPC-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-SAP-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-SAP-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-SAP-Hardened-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP4-SAPCAL-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-CHOST-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-HPC-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-Micro-5-5-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-SAP-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-SAP-Hardened-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP5-SAPCAL-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-CHOST-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-HPC-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-HPC-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-SAP-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-SAP-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-SAP-Hardened-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP6-SAPCAL-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-CHOST-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-GCE-3P
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-HPC-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-SAP-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-SAP-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-SAP-GCE-3P
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-SAP-Hardened-GCE
google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP7-SAPCAL-GCE
google-guest-agent-20250116.00-150000.1.57.1
SUSE Linux Enterprise Micro 5.5
google-guest-agent-20250116.00-150000.1.57.1
SUSE Linux Enterprise Module for Public Cloud 15 SP3
google-guest-agent-20250116.00-150000.1.57.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
google-guest-agent-20250116.00-150000.1.57.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
google-guest-agent-20250116.00-150000.1.57.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6
google-guest-agent-20250116.00-150000.1.57.1
openSUSE Leap 15.6
google-guest-agent-20250116.00-150000.1.57.1

Описание

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.


Затронутые продукты
Image SLES15-SP3-BYOS-GCE:google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP3-HPC-BYOS-GCE:google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP3-SAP-BYOS-GCE:google-guest-agent-20250116.00-150000.1.57.1
Image SLES15-SP3-SAPCAL-GCE:google-guest-agent-20250116.00-150000.1.57.1

Ссылки
Уязвимость SUSE-SU-2025:1005-1