{"schema_version":"1.7.5","id":"SUSE-SU-2026:1411-1","published":"2026-04-16T12:57:14Z","modified":"2026-04-17T09:00:34.284600Z","related":["CVE-2026-25934","CVE-2026-33186"],"upstream":["CVE-2026-25934","CVE-2026-33186"],"summary":"Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls","details":"This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue:\n\n- CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files (bsc#1258097).\n- CVE-2026-33186: fix authorization bypass in grpc-go due to improper validation of the HTTP/2 :path pseudo-header (bsc#1260218)\n","affected":[{"package":{"name":"terraform-provider-local","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","purl":"pkg:rpm/suse/terraform-provider-local&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.8.1"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-null","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","purl":"pkg:rpm/suse/terraform-provider-null&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.12.1"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-random","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","purl":"pkg:rpm/suse/terraform-provider-random&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.6.2"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-tls","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","purl":"pkg:rpm/suse/terraform-provider-tls&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.5.6.2"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-local","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","purl":"pkg:rpm/suse/terraform-provider-local&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.8.1"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-null","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","purl":"pkg:rpm/suse/terraform-provider-null&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.12.1"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-random","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","purl":"pkg:rpm/suse/terraform-provider-random&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.6.2"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-tls","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","purl":"pkg:rpm/suse/terraform-provider-tls&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.5.6.2"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-local","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/terraform-provider-local&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.8.1"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-null","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/terraform-provider-null&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.12.1"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-random","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/terraform-provider-random&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.6.2"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}},{"package":{"name":"terraform-provider-tls","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/terraform-provider-tls&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.5.6.2"}]}],"ecosystem_specific":{"binaries":[{"terraform-provider-local":"2.0.0-150200.6.8.1","terraform-provider-null":"3.0.0-150200.6.12.1","terraform-provider-random":"3.0.0-150200.6.6.2","terraform-provider-tls":"3.0.0-150200.5.6.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1411-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261411-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258097"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260218"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-25934"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-33186"}]}