Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1763-1

Опубликовано: 08 мая 2026
Источник: suse-cvrf

Описание

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issues:

  • CVE-2025-22869: golang.org/x/crypto/ssh: denial of service when clients do not complete the key exchange in SSH servers which implement file transfer protocols (bsc#1239324).

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15 SP4
terraform-provider-aws-3.11.0-150200.6.12.1
terraform-provider-azurerm-2.32.0-150200.6.6.1
terraform-provider-external-2.0.0-150200.6.6.1
terraform-provider-google-3.43.0-150200.6.6.1
terraform-provider-helm-2.9.0-150200.6.17.1
terraform-provider-kubernetes-1.13.2-150200.6.6.1
terraform-provider-local-2.0.0-150200.6.11.1
terraform-provider-random-3.0.0-150200.6.9.1
terraform-provider-tls-3.0.0-150200.5.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
terraform-provider-aws-3.11.0-150200.6.12.1
terraform-provider-azurerm-2.32.0-150200.6.6.1
terraform-provider-external-2.0.0-150200.6.6.1
terraform-provider-google-3.43.0-150200.6.6.1
terraform-provider-helm-2.9.0-150200.6.17.1
terraform-provider-kubernetes-1.13.2-150200.6.6.1
terraform-provider-local-2.0.0-150200.6.11.1
terraform-provider-random-3.0.0-150200.6.9.1
terraform-provider-tls-3.0.0-150200.5.9.1

Описание

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.


Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-aws-3.11.0-150200.6.12.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-azurerm-2.32.0-150200.6.6.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-external-2.0.0-150200.6.6.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-google-3.43.0-150200.6.6.1

Ссылки