SUSE-SU-2026:3197-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:3197-1

HIGH7.4

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

Published Jul 22, 2026

Modified 3 days ago

Fix available

Details

Description of the patch:

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the following issue

CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266477 bsc#1266482 bsc#1266541 bsc#1266547).

Affected Packages

terraform-provider-aws

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5SUSE Linux Enterprise Server 15 SP4

Fixed in:

3.11.0-150200.6.21.1

terraform-provider-azurerm

Fixed in:

2.32.0-150200.6.15.1

terraform-provider-external

Fixed in:

2.0.0-150200.6.15.1

terraform-provider-google

Fixed in:

3.43.0-150200.6.15.1

terraform-provider-helm