openSUSE google-osconfig-agent Vulnerabilities Addressed in July 2026 Updates

Two moderate vulnerabilities have been identified in the google-osconfig-agent for openSUSE Tumbleweed. The first, CVE-2026-11349, addresses a security threat that could allow privilege escalation. The second, CVE-2026-11331, pertains to a denial-of-service (DoS) vulnerability. Both vulnerabilities were fixed in the google-osconfig-agent packages released on July 8, 2026. Users of openSUSE Tumbleweed are advised to update to the latest versions to mitigate risks. The vulnerabilities affect the google-osconfig-agent package specifically. No active exploitation has been reported for either vulnerability. The updates are available on the GA media of openSUSE Tumbleweed.

Key Points: • Two moderate vulnerabilities (CVE-2026-11349 and CVE-2026-11331) fixed in google-osconfig-agent. • CVE-2026-11349 involves privilege escalation while CVE-2026-11331 is a denial-of-service issue. • Users are urged to update to the latest google-osconfig-agent package to mitigate risks.