SUSE-SU-2026:4444-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20264444-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4444-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:4444-1
- Upstream
- Related
- Published
- 2026-10-05T08:19:27Z
- Modified
- 2026-10-05T18:00:07Z
- Summary
- Security update for terraform-provider-susepubliccloud
- Details
-
This update for terraform-provider-susepubliccloud fixes the following issues:
- CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279252).
- CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279072).
- CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278763).
- CVE-2026-88922: github.com/hashicorp/go-getter: improper metadata handling in archive decompression allows for creation of files with elevated permission bits and possible LPE (bsc#1280841).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20264444-1/
- https://bugzilla.suse.com/1278763
- https://bugzilla.suse.com/1279072
- https://bugzilla.suse.com/1279252
- https://bugzilla.suse.com/1280841
- https://www.suse.com/security/cve/CVE-2026-84303
- https://www.suse.com/security/cve/CVE-2026-84304
- https://www.suse.com/security/cve/CVE-2026-84445
- https://www.suse.com/security/cve/CVE-2026-88922
Affected packages
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
terraform-provider-susepubliccloud
Package
- Name
- terraform-provider-susepubliccloud
- Purl
- pkg:rpm/suse/terraform-provider-susepubliccloud&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed0.0.1-150100.3.26.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
terraform-provider-susepubliccloud
Package
- Name
- terraform-provider-susepubliccloud
- Purl
- pkg:rpm/suse/terraform-provider-susepubliccloud&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed0.0.1-150100.3.26.1