SUSE-SU-2026:3198-1

HIGH7.4

Security update for terraform-provider-susepubliccloud

Published Jul 22, 2026

Modified 3 days ago

Fix available

Details

Description of the patch:

This update for terraform-provider-susepubliccloud fixes the following issue

CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266477).

Affected Packages

terraform-provider-susepubliccloud

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5SUSE Linux Enterprise Server 15 SP4

Fixed in:

0.0.1-150100.3.17.1

References

ADVISORY

https://bugzilla.suse.com/1266477

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-July/027767.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-39821/

WEB

https://www.suse.com/support/security/rating/

ADVISORY