# CVE-2024-45337: google-guest-agent: This update for google-guest-agent fixes the following issues Security issues: - CVE-2026-39821: Update golang.org/... CVE-2024-45337 is fixed in 28 products on 1 platform, first by golang-go.crypto-dev 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1, released December 11, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2024-45337 - Priority: High - CVSS: 9.1 (Medium) - EPSS: 0.0318 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Dec 11, 2024 ## Description This update for google-guest-agent fixes the following issues Security issues: - CVE-2026-39821: Update golang.org/x/net/idna dependency (bsc#1266603). - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533). - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234563). - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239334). - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253889). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265762). - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262926). ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | amazon-cloudwatch-agent amzn 2023 | 1.300052.1-1.amzn2023 | [ALAS2023-2025-880](https://patchblox.com/security/data/fix/linux/alas2023-2025-880.md) | Feb 26, 2025 | | Linux | apptainer opensuse-leap 15.6 | 1.3.6-150600.4.9.1 | [SUSE-SU-2025:0980-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0980-1.md) | Mar 21, 2025 | | Linux | apptainer sles 15.6 | 1.3.6-150600.4.9.1 | [SUSE-SU-2025:0980-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0980-1.md) | Mar 21, 2025 | | Linux | brise opensuse-leap 15.6 | 20230603+git.5fdd2d6-150600.3.8.1 | [SUSE-SU-2025:0601-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0601-1.md) | Feb 20, 2025 | | Linux | brise sles 15.6 | 20230603+git.5fdd2d6-150600.3.8.1 | [SUSE-SU-2025:0601-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0601-1.md) | Feb 20, 2025 | | Linux | cheat opensuse-leap 15.6 | 4.4.2-bp156.3.3.1 | [OPENSUSE-SU-2025:0025-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-0025-1.md) | Jan 23, 2025 | | Linux | containerd amzn 2023 | 1.7.25-1.amzn2023.0.1 | [ALAS2023-2025-835](https://patchblox.com/security/data/fix/linux/alas2023-2025-835.md) | Jan 30, 2025 | | Linux | containerd-debuginfo amzn 2023 | 1.7.25-1.amzn2023.0.1 | [ALAS2023-2025-835](https://patchblox.com/security/data/fix/linux/alas2023-2025-835.md) | Jan 30, 2025 | | Linux | containerd-debugsource amzn 2023 | 1.7.25-1.amzn2023.0.1 | [ALAS2023-2025-835](https://patchblox.com/security/data/fix/linux/alas2023-2025-835.md) | Jan 30, 2025 | | Linux | containerd-stress amzn 2023 | 1.7.25-1.amzn2023.0.1 | [ALAS2023-2025-835](https://patchblox.com/security/data/fix/linux/alas2023-2025-835.md) | Jan 30, 2025 | | Linux | containerd-stress-debuginfo amzn 2023 | 1.7.25-1.amzn2023.0.1 | [ALAS2023-2025-835](https://patchblox.com/security/data/fix/linux/alas2023-2025-835.md) | Jan 30, 2025 | | Linux | dracut-saltboot opensuse-leap 15.6 | 0.1.1728559936.c16d4fb-150000.1.56.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | git-bug opensuse-leap 16.0 | 0.10.1-bp160.1.1 | [OPENSUSE-SU-2025:20143-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20143-1.md) | Dec 4, 2025 | | Linux | gitea-tea opensuse-leap 15.6 | 0.9.2-bp156.5.1 | [OPENSUSE-SU-2025:0094-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-0094-1.md) | Mar 20, 2025 | | Linux | gitea-tea opensuse-leap 16.0 | 0.15.1-bp160.1.1 | [OPENSUSE-SU-2026:21603-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21603-1.md) | Aug 18, 2026 | | Linux | golang-github-prometheus-promu opensuse-leap 15.6 | 0.17.0-150000.3.24.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | golang-github-prometheus-promu sles 15.6 | 0.17.0-150000.3.24.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | golang-go.crypto Debian 14 | 1:0.42.0-1 | [DEBIAN-CVE-2024-45337](https://patchblox.com/security/data/fix/linux/debian-cve-2024-45337.md) | Dec 12, 2024 | | Linux | golang-go.crypto-dev Ubuntu 18.04.6 LTS (bionic) | 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1 | [golang-go.crypto-dev 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-golang-go.crypto-dev-1-0.0-git20170629.0.5ef0053-2ubuntu0.1-esm1.md) | Dec 11, 2024 | | Linux | golang-golang-x-crypto-dev Ubuntu 18.04.6 LTS (bionic) | 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1 | [golang-golang-x-crypto-dev 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-golang-golang-x-crypto-dev-1-0.0-git20170629.0.5ef0053-2ubuntu0.1-esm1.md) | Dec 11, 2024 | | Linux | golang-golang-x-crypto-dev Ubuntu 20.04 LTS (focal) | 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm1 | [golang-golang-x-crypto-dev 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-golang-golang-x-crypto-dev-1-0.0-git20200221.2aa609c-1ubuntu0.1-esm1.md) | Dec 11, 2024 | | Linux | golang-golang-x-crypto-dev Ubuntu 22.04.1 LTS (jammy) | 1:0.0~git20211202.5770296-1ubuntu0.1~esm1 | [golang-golang-x-crypto-dev 1:0.0~git20211202.5770296-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-golang-x-crypto-dev-1-0.0-git20211202.5770296-1ubuntu0.1-esm1.md) | Dec 11, 2024 | | Linux | golang-golang-x-crypto-dev Ubuntu 24.04.5 LTS (noble) | 1:0.19.0-1ubuntu0.1~esm1 | [golang-golang-x-crypto-dev 1:0.19.0-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-golang-golang-x-crypto-dev-1-0.19.0-1ubuntu0.1-esm1.md) | Dec 11, 2024 | | Linux | google-guest-agent Ubuntu 18.04.6 LTS (bionic) | 20241011.01-0ubuntu1~18.04.0+esm1 | [google-guest-agent 20241011.01-0ubuntu1~18.04.0+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-google-guest-agent-20241011.01-0ubuntu1-18.04.0-esm1.md) | Dec 11, 2024 | | Linux | google-guest-agent Ubuntu 20.04 LTS (focal) | 20250116.00-0ubuntu1~20.04.0+esm1 | [google-guest-agent 20250116.00-0ubuntu1~20.04.0+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-google-guest-agent-20250116.00-0ubuntu1-20.04.0-esm1.md) | Dec 11, 2024 | | Linux | google-guest-agent Ubuntu 22.04.1 LTS (jammy) | 20250116.00-0ubuntu1~22.04.1 | [google-guest-agent 20250116.00-0ubuntu1~22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-google-guest-agent-20250116.00-0ubuntu1-22.04.1.md) | Dec 11, 2024 | | Linux | google-guest-agent Ubuntu 24.04.5 LTS (noble) | 20250116.00-0ubuntu1~24.04.2 | [google-guest-agent 20250116.00-0ubuntu1~24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-google-guest-agent-20250116.00-0ubuntu1-24.04.2.md) | Dec 11, 2024 | | Linux | google-guest-agent Ubuntu 25.04 (plucky) | 20250116.00-0ubuntu2.1 | [google-guest-agent 20250116.00-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-google-guest-agent-20250116.00-0ubuntu2.1.md) | Jan 16, 2026 | | Linux | google-guest-agent opensuse-leap 15.6 | 20250327.01-150000.1.60.1 | [SUSE-SU-2025:1143-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1143-1.md) | Apr 4, 2025 | | Linux | google-guest-agent opensuse-leap 16.0 | 20250506.01-160000.1.1 | [OPENSUSE-SU-2026:20609-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20609-1.md) | Apr 22, 2026 | | Linux | google-guest-agent sles 15.6 | 20260529.00-150000.1.70.1 | [SUSE-SU-2026:2612-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2612-1.md) | Jun 24, 2026 | | Linux | google-guest-agent sles 15.7 | 20260529.00-150000.1.70.1 | [SUSE-SU-2026:2612-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2612-1.md) | Jun 24, 2026 | | Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20250226T025151-150000.1.35.1 | [SUSE-SU-2025:0770-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0770-1.md) | Mar 3, 2025 | | Linux | govulncheck-vulndb sles 15.6 | 0.0.20250226T025151-150000.1.35.1 | [SUSE-SU-2025:0770-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0770-1.md) | Mar 3, 2025 | | Linux | grafana opensuse-leap 15.6 | 10.4.13-150200.3.59.1 | [SUSE-SU-2025:0545-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0545-1.md) | Feb 14, 2025 | | Linux | grafana sles 15.6 | 10.4.13-150200.3.59.1 | [SUSE-SU-2025:0545-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0545-1.md) | Feb 14, 2025 | | Linux | helm opensuse-leap 15.6 | 3.17.1-150000.1.41.1 | [SUSE-SU-2025:0602-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0602-1.md) | Feb 20, 2025 | | Linux | helm sles 15.6 | 3.17.1-150000.1.41.1 | [SUSE-SU-2025:0602-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0602-1.md) | Feb 20, 2025 | | Linux | kubevirt opensuse-leap 15.6 | 1.4.1-150600.5.24.1 | [SUSE-SU-2025:03278-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03278-1.md) | Sep 19, 2025 | | Linux | kubevirt sles 15.6 | 1.4.1-150600.5.24.1 | [SUSE-SU-2025:03278-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03278-1.md) | Sep 19, 2025 | | Linux | kubevirt sles 15.7 | 1.5.2-150700.3.5.2 | [SUSE-SU-2025:02581-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02581-1.md) | Jul 31, 2025 | | Linux | nerdctl amzn 2023 | 2.0.3-1.amzn2023.0.1 | [ALAS2023-2025-833](https://patchblox.com/security/data/fix/linux/alas2023-2025-833.md) | Jan 30, 2025 | | Linux | runfinch-finch amzn 2023 | 1.6.0-1.amzn2023.0.1 | [ALAS2023-2025-834](https://patchblox.com/security/data/fix/linux/alas2023-2025-834.md) | Jan 30, 2025 | | Linux | spacecmd opensuse-leap 15.6 | 5.0.11-150000.3.130.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | supportutils-plugin-salt opensuse-leap 15.6 | 1.2.3-150000.3.16.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | supportutils-plugin-salt sles 15.6 | 1.2.3-150000.3.16.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | supportutils-plugin-susemanager-client opensuse-leap 15.6 | 5.0.4-150000.3.27.1 | [SUSE-SU-2025:0525-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0525-1.md) | Feb 14, 2025 | | Linux | trivy opensuse-leap 15.6 | 0.58.2-bp156.2.6.1 | [OPENSUSE-SU-2025:0056-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-0056-1.md) | Feb 7, 2025 | | Linux | vexctl opensuse-leap 15.6 | 0.4.1+git78.f951e3a-150000.1.11.1 | [SUSE-SU-2026:0592-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0592-1.md) | Feb 20, 2026 | | Linux | vexctl opensuse-leap 16.0 | 0.4.4+git20.5d61136-160000.1.1 | [OPENSUSE-SU-2026:21481-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21481-1.md) | Jul 30, 2026 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.