UbuntuUpdates.org

Package "google-osconfig-agent"

Name: google-osconfig-agent

Description:

Google OS Config Agent

Latest version: 20251028.00-0ubuntu2~22.04.1
Release: jammy (22.04)
Level: security
Repository: main
Homepage: https://github.com/GoogleCloudPlatform/osconfig

Links


Download "google-osconfig-agent"


Other versions of "google-osconfig-agent" in Jammy

Repository Area Version
base main 20210608.1-0ubuntu3
updates main 20251028.00-0ubuntu2~22.04.0

Changelog

Version: 20251028.00-0ubuntu2~22.04.1 2026-10-12 17:07:40 UTC

google-osconfig-agent (20251028.00-0ubuntu2~22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: ACL Bypass in idna
    - debian/extra/vendor/golang.org/x/net/idna/idna10.0.0.go: Updated vendored
      files for idna: reject all-ASCII xn-- labels on all Go versions.
    - debian/extra/vendor/golang.org/x/net/idna/idna9.0.0.go: Updated vendored
      files for idna: reject all-ASCII xn-- labels on all Go versions.
    - Backported from https://github.com/golang/net/commit/5ef02b8d6d7613feeac245da8fe48b5c7d85b276
    - CVE-2026-39821

 -- Isabel Garcia Contreras Fri, 02 Oct 2026 11:39:43 -0400

Source diff to previous version
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--exampl

Version: 20240524.03-0ubuntu2~22.04.1 2024-10-24 08:06:59 UTC

  google-osconfig-agent (20240524.03-0ubuntu2~22.04.1) jammy-security; urgency=medium

  * No change rebuild due to golang-1.22 update

 -- Evan Caville <email address hidden> Thu, 24 Oct 2024 09:56:20 +1000

Source diff to previous version

Version: 20240320.00-0ubuntu1~22.04.1 2024-07-10 08:07:06 UTC

  google-osconfig-agent (20240320.00-0ubuntu1~22.04.1) jammy-security; urgency=medium

  * No change rebuild due to golang-1.21 update

 -- Nishit Majithia <email address hidden> Wed, 10 Jul 2024 09:47:42 +0530

Source diff to previous version

Version: 20230504.00-0ubuntu1~22.04.1 2024-04-23 13:06:59 UTC

  google-osconfig-agent (20230504.00-0ubuntu1~22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/extra/vendor/googgle.golang.org/protobuf was
      patched with a backport of f01a588e5810b90996452eec4a28f22a0afae023
      in files encoding/protojson/well_known_types.go,
      internal/encoding/json/decode.go.
    - debian/extra/vendor adding patches-applied and README.txt for
      track/documentation propose about patches applied in vendored sources.
    - CVE-2024-24786

 -- Leonidas Da Silva Barbosa <email address hidden> Wed, 13 Mar 2024 12:56:19 -0300

Source diff to previous version
CVE-2024-24786 The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshali

Version: 20220824.00-0ubuntu1~22.04.2 2023-04-28 09:07:14 UTC

  google-osconfig-agent (20220824.00-0ubuntu1~22.04.2) jammy-security; urgency=medium

  * No change build due to golang-1.18 update

 -- Nishit Majithia <email address hidden> Fri, 28 Apr 2023 12:44:04 +0530




About   -   Send Feedback to @ubuntu_updates