Описание
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls
This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls fixes the following issue
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265678, bsc#1265700).
Список пакетов
SUSE Linux Enterprise Module for Public Cloud 15 SP4
terraform-provider-aws-3.11.0-150200.6.15.2
terraform-provider-azurerm-2.32.0-150200.6.9.2
terraform-provider-external-2.0.0-150200.6.9.2
terraform-provider-google-3.43.0-150200.6.9.2
terraform-provider-helm-2.9.0-150200.6.20.2
terraform-provider-kubernetes-1.13.2-150200.6.9.1
terraform-provider-random-3.0.0-150200.6.12.1
terraform-provider-susepubliccloud-0.0.1-150100.3.11.1
terraform-provider-tls-3.0.0-150200.5.12.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
terraform-provider-aws-3.11.0-150200.6.15.2
terraform-provider-azurerm-2.32.0-150200.6.9.2
terraform-provider-external-2.0.0-150200.6.9.2
terraform-provider-google-3.43.0-150200.6.9.2
terraform-provider-helm-2.9.0-150200.6.20.2
terraform-provider-kubernetes-1.13.2-150200.6.9.1
terraform-provider-random-3.0.0-150200.6.12.1
terraform-provider-susepubliccloud-0.0.1-150100.3.11.1
terraform-provider-tls-3.0.0-150200.5.12.1
Ссылки
- Link for SUSE-SU-2026:2850-1
- E-Mail link for SUSE-SU-2026:2850-1
- SUSE Security Ratings
- SUSE Bug 1265678
- SUSE Bug 1265700
- SUSE CVE CVE-2026-33814 page
Описание
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-aws-3.11.0-150200.6.15.2
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-azurerm-2.32.0-150200.6.9.2
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-external-2.0.0-150200.6.9.2
SUSE Linux Enterprise Module for Public Cloud 15 SP4:terraform-provider-google-3.43.0-150200.6.9.2
Ссылки
- CVE-2026-33814
- SUSE Bug 1264506
- SUSE Bug 1268758