Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

SUSE 2026 3057 1 Terraform Provider Important Denial of Service Risk

suse
Calendar Grey July 15, 2026
Scroller Suse
The important update for terraform-provider-susepubliccloud addresses 10 critical vulnerabilities including denial of service issues.
SUSE has released a security update addressing ten vulnerabilities in terraform-provider-susepubliccloud, enhancing protection for several affected product versions

Summary

## This update for terraform-provider-susepubliccloud fixes the following issues * CVE-2022-41723: go1.19,go1.20: net/http2: quadratic complexity in HPACK decoding (bsc#1208300). * CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 `:path` pseudo-header (bsc#1260180). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266477). * CVE-2026-41602: github.com/apache/thrift: `TFramedTransport` frame size headers can lead to a `uint32` integer overflow (bsc#1263515). * CVE-2026-41603: github.com/apache/thrift: improper hostname verification in `TSSLTransportFactory` can lead to host mismatch (bsc#1263606).

Topics%20covered

Topics Covered

security advisory denial of service security update SuSE important terraform-provider-susepubliccloud

References

* bsc#1208300

* bsc#1260180

* bsc#1263247

* bsc#1263316

* bsc#1263357

* bsc#1263411

* bsc#1263445

* bsc#1263515

* bsc#1263606

* bsc#1266477

Cross-

* CVE-2022-41723

* CVE-2026-33186

* CVE-2026-39821

* CVE-2026-41602

* CVE-2026-41603

* CVE-2026-41604

* CVE-2026-41605

* CVE-2026-41606

* CVE-2026-41607

* CVE-2026-41636

CVSS scores:

* CVE-2022-41723 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2022-41723 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2022-41723 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-33186 ( SUSE ): 8.6

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3057-1
Release Date: 2026-07-15T13:30:14Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service security update SuSE important terraform-provider-susepubliccloud

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.