Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Fedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues

fedora
Calendar Grey July 25, 2026
Scroller Fedora
Critical updates for Fedora 43 regarding google-osconfig-agent address Denial of Service and memory issues.
Fedora 43 has released an update for the Google OS Config Agent, fixing several bugs and vulnerabilities identified by CVEs, and recommending installation via the dnf update progra...

Summary

Google OS Config Agent

Update Information:

Update to 20260717

Topics%20covered

Topics Covered

security advisory fedora DoS important memory exhaustion go-osconfig-agent

Change Log

* Fri Jul 17 2026 Mikel Olasagasti Uranga - 20260717.00-1 - Update to 200260717 - Closes rhbz#2336973 * Thu Jul 16 2026 Fedora Release Engineering - 20241029.01-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Tue Feb 3 2026 Maxwell G - 20241029.01-8 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 20241029.01-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Sun Oct 12 2025 Maxwell G - 20241029.01-6 - Rebuild for golang 1.25.2 * Fri Oct 10 2025 Alejandro Sáez - 20241029.01-5 - rebuild * Fri Aug 15 2025 Maxwell G - 20241029.01-4 - Rebuild for golang-1.25.0 * Thu Jul 24 2025 Fedora Release Engineering - 20241029.01-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jan 17 2025 Fedora Release Engineering - 20241029.01-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2385031 - google-osconfig-agent: FTBFS in Fedora rawhide/f43 https://bugzilla.redhat.com/show_bug.cgi?id=2385031 [ 2 ] Bug #2408286 - CVE-2025-58189 google-osconfig-agent: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408286 [ 3 ] Bug #2409759 - CVE-2025-61723 google-osconfig-agent: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409759 [ 4 ] Bug #2410709 - CVE-2025-58185 google-osconfig-agent: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410709 [ 5 ] Bug #2411605 - CVE-2025-58188 google-osconfig-agent: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411605 [ 6 ] Bug #2412705 - CVE-2025-58183 google-os...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4a2d23b470' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: google-osconfig-agent
Product: Fedora 43
Version: 20260717.00
Release: 1.fc43
URL: https://github.com/GoogleCloudPlatform/osconfig
Summary: Google OS Config Agent

Topics%20covered

Topics Covered

security advisory fedora DoS important memory exhaustion go-osconfig-agent

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.