SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

SUSE-SU-2026:1411-1 Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the consumption of corrupted files...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: dkron, oauth2-proxy, rabbitmq-default-user-credential-updater, ytt-fips, docker-cli-buildx-fips, pushprox, lazygit, crossplane-provider-gcp, jitsucom-bulker, amazon-cloudwatch-agent-operator, aws-fsx-csi-driver-fips, nginx-prometheus-exporter-fips, wal-g,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: dkron, oauth2-proxy, rabbitmq-default-user-credential-updater, ytt-fips, docker-cli-buildx-fips, pushprox, lazygit, crossplane-provider-gcp, jitsucom-bulker, amazon-cloudwatch-agent-operator, aws-fsx-csi-driver-fips, nginx-prometheus-exporter-fips, wal-g,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dkron, oauth2-proxy, rabbitmq-default-user-credential-updater, ytt-fips, docker-cli-buildx-fips, pushprox, lazygit, crossplane-provider-gcp, jitsucom-bulker, amazon-cloudwatch-agent-operator, aws-fsx-csi-driver-fips, nginx-prometheus-exporter-fips, wal-g,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: dkron, oauth2-proxy, rabbitmq-default-user-credential-updater, ytt-fips, docker-cli-buildx-fips, pushprox, lazygit, crossplane-provider-gcp, jitsucom-bulker, amazon-cloudwatch-agent-operator, aws-fsx-csi-driver-fips, nginx-prometheus-exporter-fips, wal-g,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: dkron, oauth2-proxy, ytt-fips, amazon-cloudwatch-agent-operator, argo-cd-fips, sftpgo-plugin-auth, flux-operator, datadog-agent-fips, crossplane-provider-aws-sns-fips, step-ca, k3d, git-credential-oauth, envoy-gateway, nri-consul-fips, kafka-proxy, gitlab-cng-fips,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: apm-server-fips, nemo, k8sgpt-operator, vexctl, nats, kubernetes-csi-node-driver-registrar, kuberay-operator, linkerd2-proxy-init, terraform-provider-time, prometheus-beat-exporter-fips, kube-vip-cloud-provider, openbao-k8s-fips, confluent-common-docker, kube-vip,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: apm-server-fips, nemo, k8sgpt-operator, vexctl, nats, kubernetes-csi-node-driver-registrar, kuberay-operator, linkerd2-proxy-init, terraform-provider-time, prometheus-beat-exporter-fips, kube-vip-cloud-provider, openbao-k8s-fips, confluent-common-docker, kube-vip,...