<div class="container">
<h1>Recommended update for google-guest-oslogin</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2026:21678-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-05-15T10:43:49Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1218548">bsc#1218548</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1219642">bsc#1219642</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221342">bsc#1221342</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221900">bsc#1221900</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221901">bsc#1221901</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222171">bsc#1222171</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1231775">bsc#1231775</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1231776">bsc#1231776</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1232553">bsc#1232553</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257010">bsc#1257010</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-14688">jsc#PED-14688</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.0</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains one feature and has 10 fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for google-guest-oslogin fixes the following issues:</p>
<ul>
<li>Update to version 20260430.00<ul>
<li>URLEncode request parameters sent to the metadata server.</li>
</ul>
</li>
<li>Add /var/google-sudoers.d to tmpfile config<ul>
<li>The /var/google-users.d directory is pre-created in the Makefile but
the google-sudoers.d is not.</li>
</ul>
</li>
<li>Update to version 20260227.00 (bsc#1257010):<ul>
<li>Fix broken cache_refresh behavior when groups are disabled.<ul>
<li>Implement a binary cache for OS Login passwd entries.
This change introduces a new binary cache format for storing OS Login
passwd information. It includes:<ul>
<li><code>OsLoginPasswdCacheWriter</code>: A C++ class to build and write the cache
file. It buffers user entries, sorts them, and writes them to a
temporary file before atomically renaming it.</li>
<li><code>oslogin_passwd_cache_reader</code>: A C implementation for reading from
the cache file using mmap. It provides functions compatible with
NSS modules for looking up entries by UID, name, and iterating through all entries.</li>
<li><code>eytzinger_layout.h</code>: A template function to convert a sorted vector
into an Eytzinger layout, used for the name index to improve cache locality during lookups.</li>
<li><code>oslogin_index_structs.h</code>: Defines the structures used for the UID and Name indices.</li>
<li>New unit tests (<code>eytzinger_layout_test.cc</code>,
<code>oslogin_passwd_cache_reader_test.cc</code>, <code>round_trip_test.cc</code>) to
validate the cache functionality, including concurrent read access.</li>
<li>The <code>Makefile</code> is updated to build and run the new tests. The <code>main</code>
function is removed from <code>oslogin_utils_test.cc</code> as <code>gtest_main.cc</code> is now linked.</li>
</ul>
</li>
<li>Fix incorrect cache_refresh return value.</li>
</ul>
</li>
<li>Add google-guest-oslogin.conf and ggosl no var content (jsc#PED-14688)</li>
</ul>
</li>
<li>Update SELinux module dir as macro to allow root path move from
/var/lib/selinux to /etc/selinux (bsc#1221342)</li>
<li>Update to version 20251022.00:<ul>
<li>Log the response body when an auth failure occurs;
it usually has helpful info in it.</li>
</ul>
</li>
<li>Update to version 20250821.00:<ul>
<li>Check policy uses adminLogin for cloud run</li>
</ul>
</li>
<li>from version 20250807.00:<ul>
<li>Extract the principal from certs when cloud_run enabled</li>
</ul>
</li>
<li>Update to version 20250710.00:<ul>
<li>Add the cloudrun support</li>
</ul>
</li>
<li>Update to version 20250624.00:<ul>
<li>Pass c-strings to logging functions:</li>
</ul>
</li>
<li>from version 20241216.00:<ul>
<li>Send the correct type to SysLogErr; the clang sanitizer
dislikes the type mismatch.</li>
<li>Add Eric to the owners file.</li>
<li>Revert "new client component and tests"</li>
</ul>
</li>
<li>from version 20241214.00<ul>
<li>Remove pat from owners</li>
</ul>
</li>
<li>from version 20241206.00<ul>
<li>Fix json include</li>
<li>build: remove oslogin_sshca from binaries list</li>
<li>Fix bad struct initialization pattern <code>= { 0 }</code></li>
<li>Apply "include what you use," fixing missing include
statements broadly.</li>
<li>Fix base64.h's missing includes and BSD types</li>
<li>Fix a bug where very large GIDs would cause integer overflow errors</li>
</ul>
</li>
<li>from version 20241127.00:<ul>
<li>Rename openbsd.h to base64.h and move it into the src/ folder</li>
</ul>
</li>
<li>from version 20241126.01:<ul>
<li>Follow the Google style guide by using the "local include style"
to include files from this project.</li>
</ul>
</li>
<li>from version 20241126.00:<ul>
<li>Delete oslogin_sshca binary, add it to the ignore list</li>
</ul>
</li>
<li>from version 20241120.00<ul>
<li>OS Login agent searches for full fingerprint extension instead of equals</li>
</ul>
</li>
<li>from version 20241116.00:<ul>
<li>Log an error when user has no challenges configured</li>
</ul>
</li>
<li>Rework SELinux support (bsc#1232553):<ul>
<li>Add pkgconfig(systemd) to BuildRequires for SELinux builds</li>
<li>Add policycoreutils to BuildRequires</li>
<li>Build and install SELinux module on older distributions as well
to allow users to use the module with their own SELinux policies</li>
<li>Make checkpolicy build dependency unconditional</li>
<li>Move oslogin.pp SELinux module into %{selinuxtype} subdirectory</li>
<li>Own %{_datadir}/selinux{,/packages} on older distributions</li>
<li>Split SELinux support into separate -selinux package</li>
<li>Use SELinux RPM macros to install and uninstall SELinux module</li>
<li>Use RPM conditional builds to enable SELinux on newer distributions</li>
</ul>
</li>
<li>Build and install SELinux module (bsc#1232553)</li>
<li>Update to version 20241021.00 (bsc#1231775, bsc#1231776):<ul>
<li>Update OWNERS</li>
</ul>
</li>
<li>Update to version 20240925.00:<ul>
<li>Inherit environment build flags</li>
</ul>
</li>
<li>Update to version 20240701.00:<ul>
<li>Don't retry bad request responses</li>
</ul>
</li>
<li>Update to version 20240415.00:<ul>
<li>Log clearly when the initial parsing of a JSON object fails</li>
</ul>
</li>
<li>Fix file permissions for google_authorized_principals binary (bsc#1222171)</li>
<li>Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)<ul>
<li>pam: Bring back pam's account management implementation</li>
<li>Change error messages when checking login policy</li>
<li>Remove quintonamore from OWNERS</li>
</ul>
</li>
<li>Add explicit versioned dependency on google-guest-agent (bsc#1219642)</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro 6.0
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-6.0-713=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro 6.0 (aarch64 s390x x86_64)
<ul>
<li>google-guest-oslogin-debugsource-20260430.00-1.1</li>
<li>google-guest-oslogin-debuginfo-20260430.00-1.1</li>
<li>google-guest-oslogin-20260430.00-1.1</li>
</ul>
</li>
<li>
SUSE Linux Micro 6.0 (noarch)
<ul>
<li>google-guest-oslogin-selinux-20260430.00-1.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1218548">https://bugzilla.suse.com/show_bug.cgi?id=1218548</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1219642">https://bugzilla.suse.com/show_bug.cgi?id=1219642</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221342">https://bugzilla.suse.com/show_bug.cgi?id=1221342</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221900">https://bugzilla.suse.com/show_bug.cgi?id=1221900</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221901">https://bugzilla.suse.com/show_bug.cgi?id=1221901</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222171">https://bugzilla.suse.com/show_bug.cgi?id=1222171</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1231775">https://bugzilla.suse.com/show_bug.cgi?id=1231775</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1231776">https://bugzilla.suse.com/show_bug.cgi?id=1231776</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1232553">https://bugzilla.suse.com/show_bug.cgi?id=1232553</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257010">https://bugzilla.suse.com/show_bug.cgi?id=1257010</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-14688">https://jira.suse.com/browse/PED-14688</a>
</li>
</ul>
</div>