Fedora 42 : opentofu (2025-6ab111452f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6ab111452f advisory. Update to 1.10.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 41 : opentofu (2025-c555ce4089)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c555ce4089 advisory. Update to 1.10.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : opentofu (2025-21b93506d5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-21b93506d5 advisory. Update to 1.10.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

opentofu-1.10.7-1.1 on GA media (moderate)

opentofu-1.10.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15711-1 Rating: moderate Cross-References: CVE-2025-58183 CVE-2025-58185 CVE-2025-58187 CVSS scores: CVE-2025-58183 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-58183 SUSE : 4.8...

OPENSUSE-SU-2025:15711-1 opentofu-1.10.7-1.1 on GA media

These are all security issues fixed in the opentofu-1.10.7-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-W2JF-268Q-MRVH OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or crash when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...

EUVD-2025-38039

OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, gpu-operator, seaweedfs-operator, terraform-provider-time-fips, nvidia-nsight-compute-12.9, cluster-proportional-autoscaler-fips, cloud-provider-aws-fips, vitess, iptables-wrappers, kyverno-policy-reporter-plugins-trivy-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, gpu-operator, seaweedfs-operator, terraform-provider-time-fips, nvidia-nsight-compute-12.9, cluster-proportional-autoscaler-fips, cloud-provider-aws-fips, vitess, iptables-wrappers, kyverno-policy-reporter-plugins-trivy-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, gpu-operator, seaweedfs-operator, terraform-provider-time-fips, nvidia-nsight-compute-12.9, cluster-proportional-autoscaler-fips, cloud-provider-aws-fips, vitess, iptables-wrappers, kyverno-policy-reporter-plugins-trivy-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, gpu-operator, seaweedfs-operator, terraform-provider-time-fips, nvidia-nsight-compute-12.9, cluster-proportional-autoscaler-fips, cloud-provider-aws-fips, vitess, iptables-wrappers, kyverno-policy-reporter-plugins-trivy-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, gpu-operator, seaweedfs-operator, terraform-provider-time-fips, nvidia-nsight-compute-12.9, cluster-proportional-autoscaler-fips, cloud-provider-aws-fips, vitess, iptables-wrappers, kyverno-policy-reporter-plugins-trivy-fips,...

Fedora: Security Advisory (FEDORA-2025-121049bbf7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: grafana-alloy, terraform, ipfs-cluster, kpt, nri-nginx, apm-server, caddy, kyverno-notation-aws, guac, harbor-registry, rabbitmq-messaging-topology-operator, kind, envconsul, witness, dgraph, docker-cli-buildx, pluto, src, falcoctl, bom, wire-go,...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: k9s, xeol, snyk-cli, wolfictl, steampipe, tflint, kubescape, rancher-fleet, trivy, tfsec, grype, zarf, syft, conftest, terraform, kots, terragrunt, opentofu, zot, trivy-operator...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: k9s, xeol, snyk-cli, wolfictl, steampipe, tflint, kubescape, rancher-fleet, trivy, tfsec, grype, zarf, syft, conftest, terraform, kots, terragrunt, opentofu, zot, trivy-operator...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy-operator, grype-fips, terraform, xeol-fips, grype-db, k9s-fips, conftest, steampipe, terragrunt, cloudbeat, trivy-operator-fips, trivy, zarf, wolfictl, xeol, syft, opentofu-fips, kubescape, zot, k9s, trivy-fips, tflint, terraform-fips, syft-fips, snyk-cli,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: trivy-operator, grype-fips, terraform, xeol-fips, grype-db, k9s-fips, conftest, steampipe, terragrunt, cloudbeat, trivy-operator-fips, trivy, zarf, wolfictl, xeol, syft, opentofu-fips, kubescape, zot, k9s, trivy-fips, tflint, terraform-fips, syft-fips, snyk-cli,...

Fedora 43 : opentofu (2025-121049bbf7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-121049bbf7 advisory. Automatic update for opentofu-1.9.1-1.fc43. Changelog Wed May 14 2025 Mikel Olasagasti Uranga - 1.9.1-1 - Update to 1.9.1 - Closes rhbz2362077...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cluster-api-gcp-controller, gpu-operator, kyverno-fips, nvidia-nsight-compute-12.9, beats, caddy, cloud-provider-aws-fips, docker-cli-buildx, sqlexporter, flux-helm-controller, certificate-transparency, supercronic, falcoctl-fips,...