SUSE-SU-2026:21989-1: important: Security update for google-guest-agent
SLE-UPDATES
null at suse.de
Fri Jun 5 12:31:23 UTC 2026
# Security update for google-guest-agent
Announcement ID: SUSE-SU-2026:21989-1
Release Date: 2026-06-03T12:28:02Z
Rating: important
References:
* bsc#1210938
* bsc#1239334
* bsc#1239944
* bsc#1243254
* bsc#1243505
* bsc#1245759
* bsc#1253889
* bsc#1257010
* bsc#1260264
* bsc#1262926
* bsc#1265762
Cross-References:
* CVE-2025-22868
* CVE-2025-22869
* CVE-2025-58181
* CVE-2026-33186
* CVE-2026-33814
* CVE-2026-34986
CVSS scores:
* CVE-2025-22868 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-22868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-22868 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-22869 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-22869 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-58181 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2025-58181 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2025-58181 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-33186 ( SUSE ): 8.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-34986 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-34986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
* SUSE Linux Micro 6.0
An update that solves six vulnerabilities and has five fixes can now be
installed.
## Description:
This update for google-guest-agent fixes the following issues:
Update to version 20260430.00
* Update THIRD_PARTY_LICENSES to be package specific location. (#608)
* Update dependencies and go version to 1.26.2 (#607) (bsc#1265762,
CVE-2026-33814)
* Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604) (bsc#1260264,
CVE-2026-33186)
* Backport oslogin changes for sles16 to legacy agent (#603)
* Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
* Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
* Actually finally fix the RPM spec (#601)
* Correct guest telemetry build target (#600)
* Add packaging for new telemetry extension (#599)
* Implement new scheduled job for routes monitor (#598)
* Add packaging changes for locally bundled extensions feature support (#593)
* Ensure the uninstall script handles GCE metadata endpoint unavailability.
(#591)
* Disable certificates when security keys are enabled (#588)
* Move sourcing of per-user configs to the end of sshd_config, fixing 2FA
logins. (#590)
* Source the contents of /var/google-users.d config files. (#586)
* Force remove core plugin configuration for windows (#587)
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583) (bsc#1239334,
CVE-2025-22869, bsc#1253889, CVE-2025-58181)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20260424.00
* Bring topic-stable up to latest point. (#606)
* Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20260423.01
* Update THIRD_PARTY_LICENSES to be package specific location. (#608)
* from version 20260423.00
* Update dependencies and go version to 1.26.2 (#607)
* Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)
* Backport oslogin changes for sles16 to legacy agent (#603)
* Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
* Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
* Actually finally fix the RPM spec (#601)
* Correct guest telemetry build target (#600)
* Add packaging for new telemetry extension (#599)
* Implement new scheduled job for routes monitor (#598)
* Add packaging changes for locally bundled extensions feature support (#593)
* Ensure the uninstall script handles GCE metadata endpoint unavailability.
(#591)
* Disable certificates when security keys are enabled (#588)
* Move sourcing of per-user configs to the end of sshd_config, fixing 2FA
logins. (#590)
* Source the contents of /var/google-users.d config files. (#586)
* Force remove core plugin configuration for windows (#587)
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20260422.01
* Bring topic-stable up to latest point. (#606)
* Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20260422.00
* Update dependencies and go version to 1.26.2 (#607)
* Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)
* Backport oslogin changes for sles16 to legacy agent (#603)
* Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
* Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
* Actually finally fix the RPM spec (#601)
* Correct guest telemetry build target (#600)
* Add packaging for new telemetry extension (#599)
* Implement new scheduled job for routes monitor (#598)
* Add packaging changes for locally bundled extensions feature support (#593)
* Ensure the uninstall script handles GCE metadata endpoint unavailability.
(#591)
* Disable certificates when security keys are enabled (#588)
* Move sourcing of per-user configs to the end of sshd_config, fixing 2FA
logins. (#590)
* Source the contents of /var/google-users.d config files. (#586)
* Force remove core plugin configuration for windows (#587)
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20260421.00
* Bring topic-stable up to latest point. (#606)
* Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20260414.00
* Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)
* Bump Go API version to 1.26
* Fix crafted JWE input with a missing encrypted key can lead to a denial of
service (bsc#1262926, CVE-2026-34986)
* Update to version 20260402.00: (bsc#1257010)
* Backport oslogin changes for sles16 to legacy agent (#603)
* Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)
* Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)
* Actually finally fix the RPM spec (#601)
* Correct guest telemetry build target (#600)
* Add packaging for new telemetry extension (#599)
* Implement new scheduled job for routes monitor (#598)
* Add packaging changes for locally bundled extensions feature support (#593)
* Ensure the uninstall script handles GCE metadata endpoint unavailability.
(#591)
* Disable certificates when security keys are enabled (#588)
* Move sourcing of per-user configs to the end of sshd_config, fixing 2FA
logins. (#590)
* Update to version 20260108.00
* Source the contents of /var/google-users.d config files. (#586)
* Update to version 20251223.00
* Force remove core plugin configuration for windows (#587)
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251218.01
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251218.00
* Force remove core plugin configuration for windows (#587)
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251216.00
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251215.00
* Force remove core plugin configuration for windows (#587)
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251210.00
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251209.00
* Force remove core plugin configuration for windows (#587)
* Update to version 20251208.00
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251206.00
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251205.00
* network: force address manager to always consolidate the OS state (#585)
* Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* Update to version 20251120.01
* fix start mode for windows on stable release (#584)
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251120.00
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251117.00
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251115.00
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251108.00
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251107.01
* Don't delete the authorized_keys file when an empty key list is passed to
updateAuthorizedKeysFile (#582)
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251031.00
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251030.02
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251030.01
* Update agent_uninstall.ps1 (#558) (#580)
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251030.00
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251011.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251009.01
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251009.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* Update to version 20251007.00
* Add Tyler, Saswat, Hank to OWNERS (#577)
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251006.01
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20251006.00
* Honor core plugin setting on windows package update (#576)
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20251005.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250930.01
* Honor core plugin setting on windows package update (#576)
* from version 20250929.01
* Restart agent if core plugin is disabled (#575)
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250929.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250926.00
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250924.02
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250924.01
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250924.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* Update to version 20250923.01
* Add extra debug logging around toggling OS Login (#572)
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250923.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250921.00
* Add extra debug logging around toggling OS Login (#572)
* from version 20250920.01
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250920.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250918.01
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250917.01
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250917.00
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250916.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250915.00
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* Disable missing daemon google_guest_agent_manager referenced by google-
startup-scripts.service
* Update to version 20250908.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250907.00
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250905.01
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250905.00
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250902.00
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* Build and install new gce_workload_cert_refresh binary
* Fix installation source of google_metadata_script_runner_adapt script
* Install new systemd service file
* gce-workload-cert-refresh.service
* Update to version 20250901.00
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250831.03
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250831.02
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250831.01
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250831.00
* Update go version to 1.25 (#565)
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250830.02
* Update go version for stable branch to 1.25 (#571)
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250830.01
* Update go version to 1.25 (#565)
* from version 20250830.00
* Add compat adapt script to windows in agent sysprep (#569)
* Fix adapt to use more portable shebang line (#567)
* Remove routes script from packaging (#566)
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250828.00
* Add adapt script in stable branch as per #569 (#570)
* Backport fix from #567 to stable branch (#568)
* from version 20250826.00
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250821.01
* Remove routes script from packaging (#566)
* Update Go API version to 1.25
* Update to version 20250718.00
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* Update to version 20250709.02
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250709.01
* Update adapt script to run on startup/shutdown both (#561)
* Update agent_uninstall.ps1 (#558)
* Stop core plugin before removing agent package (#554)
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* from version 20250709.00
* Revert compat behavior and call known binary directly (#560)
* Revert compat behavior and call known binary directly (#559)
* Build rollforward package to re-enable original agent and disable core
plugin (#557)
* from version 20250702.00
* Update adapt script to run on startup/shutdown both (#561)
* from version 20250701.01
* Update agent_uninstall.ps1 (#558)
* from version 20250701.00
* Stop core plugin before removing agent package (#554)
* from version 20250628.00
* Startup scripts should start after agent manager instead (#553)
* Update presets and install dependencies on systemd units (#552)
* Ensure agent service is disabled (#551)
* from version 20250626.00
* Disable legacy agent to enable core plugin (#550)
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* startup script: wrap compatibility decision into its own scripts (#538)
* Reapply "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523) (#540)
* from version 20250625.00
* prepare stable release.
* Install google_metadata_script_runner_adapt script (bsc#1245759)
* Update to version 20250624.00
* Final fix for RHEL packaging for routes setup (#549)
* Fix RHEL packaging for routes scripts (#548)
* Packaging changes to include routes script installation (#542)
* Update CLI name in packaging (#543)
* systemd should manage only the main process (#544)
* startup script: wrap compatibility decision into its own scripts (#538)
* Reapply "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523) (#540)
* from version 20250611.01
* prepare stable release.
* from version 20250611.00
* startup script: wrap compatibility decision into its own scripts (#538)
* Reapply "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523) (#540)
* from version 20250609.00
* prepare stable release.
* from version 20250605.00
* startup script: wrap compatibility decision into its own scripts (#538)
* Reapply "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523) (#540)
* Make sure agent added connections are activated by NM (#534)
* wrap NSS cache refresh in a goroutine (#533)
* Wicked: Only reload interfaces for which configurations are written or
changed. (#524)
* Add AuthorizedKeysCompat to windows packaging (#530)
* Remove error messages from gce_workload_cert_refresh and metadata script
runner (#527)
* Update guest-logging-go dependency (#526)
* Add 'created-by' metadata, and pass it as option to logging library (#508)
* Revert "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523)
* Re-enable disabled services if the core plugin was enabled (#522)
* Enable guest services on package upgrade (#519)
* oslogin: Correctly handle newlines at the end of modified files (#520)
* Fix core plugin path (#518)
* Fix package build issues (#517)
* Fix dependencies ran go mod tidy -v (#515)
* Fix debian build path (#514)
* Bundle compat metadata script runner binary in package (#513)
* Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
* Update startup/shutdown services to launch compat manager (#503)
* Bundle new gce metadata script runner binary in agent package (#502)
* Revert "Revert bundling new binaries in the package (#509)" (#511)
* Update to version 20250604.00
* Preparing stable build.
* from version 20250602.00
* Make sure agent added connections are activated by NM (#534)
* wrap NSS cache refresh in a goroutine (#533)
* Wicked: Only reload interfaces for which configurations are written or
changed. (#524)
* Add AuthorizedKeysCompat to windows packaging (#530)
* Remove error messages from gce_workload_cert_refresh and metadata script
runner (#527)
* Update guest-logging-go dependency (#526)
* Add 'created-by' metadata, and pass it as option to logging library (#508)
* Revert "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523)
* Re-enable disabled services if the core plugin was enabled (#522)
* Enable guest services on package upgrade (#519)
* oslogin: Correctly handle newlines at the end of modified files (#520)
* Fix core plugin path (#518)
* Fix package build issues (#517)
* Fix dependencies ran go mod tidy -v (#515)
* Fix debian build path (#514)
* Bundle compat metadata script runner binary in package (#513)
* Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
* Update startup/shutdown services to launch compat manager (#503)
* Bundle new gce metadata script runner binary in agent package (#502)
* Revert "Revert bundling new binaries in the package (#509)" (#511)
* from version 20250521.00
* Preparing stable build.
* from version 20250515.00
* Make sure agent added connections are activated by NM (#534)
* wrap NSS cache refresh in a goroutine (#533)
* Wicked: Only reload interfaces for which configurations are written or
changed. (#524)
* Add AuthorizedKeysCompat to windows packaging (#530)
* Remove error messages from gce_workload_cert_refresh and metadata script
runner (#527)
* Update guest-logging-go dependency (#526)
* Add 'created-by' metadata, and pass it as option to logging library (#508)
* Revert "oslogin: Correctly handle newlines at the end of modified files
(#520)" (#523)
* Re-enable disabled services if the core plugin was enabled (#522)
* Enable guest services on package upgrade (#519)
* oslogin: Correctly handle newlines at the end of modified files (#520)
* Fix core plugin path (#518)
* Fix package build issues (#517)
* Fix dependencies ran go mod tidy -v (#515)
* Fix debian build path (#514)
* Bundle compat metadata script runner binary in package (#513)
* Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
* Update startup/shutdown services to launch compat manager (#503)
* Bundle new gce metadata script runner binary in agent package (#502)
* Revert "Revert bundling new binaries in the package (#509)" (#511)
* Update to version 20250508.00
* Preparing stable build.
* from version 20250506.01 (bsc#1243254, bsc#1243505)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Micro 6.0
zypper in -t patch SUSE-SLE-Micro-6.0-741=1
## Package List:
* SUSE Linux Micro 6.0 (aarch64 s390x x86_64)
* google-guest-agent-20260430.00-1.1
* google-guest-agent-debuginfo-20260430.00-1.1
## References:
* https://www.suse.com/security/cve/CVE-2025-22868.html
* https://www.suse.com/security/cve/CVE-2025-22869.html
* https://www.suse.com/security/cve/CVE-2025-58181.html
* https://www.suse.com/security/cve/CVE-2026-33186.html
* https://www.suse.com/security/cve/CVE-2026-33814.html
* https://www.suse.com/security/cve/CVE-2026-34986.html
* https://bugzilla.suse.com/show_bug.cgi?id=1210938
* https://bugzilla.suse.com/show_bug.cgi?id=1239334
* https://bugzilla.suse.com/show_bug.cgi?id=1239944
* https://bugzilla.suse.com/show_bug.cgi?id=1243254
* https://bugzilla.suse.com/show_bug.cgi?id=1243505
* https://bugzilla.suse.com/show_bug.cgi?id=1245759
* https://bugzilla.suse.com/show_bug.cgi?id=1253889
* https://bugzilla.suse.com/show_bug.cgi?id=1257010
* https://bugzilla.suse.com/show_bug.cgi?id=1260264
* https://bugzilla.suse.com/show_bug.cgi?id=1262926
* https://bugzilla.suse.com/show_bug.cgi?id=1265762
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260605/8e7d0dcf/attachment.htm>
More information about the sle-updates
mailing list