206 matches found
opentofu-1.9.1-1.1 on GA media (moderate)
opentofu-1.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15030-1 Rating: moderate Cross-References: CVE-2024-45336 CVE-2024-45341 CVE-2025-22866 CVSS scores: CVE-2024-45336 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-45341 SUSE : 4.2...
OPENSUSE-SU-2025:15030-1 opentofu-1.9.1-1.1 on GA media
These are all security issues fixed in the opentofu-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-WPFP-CM49-9M9Q vulnerabilities
Vulnerabilities for packages: opentofu-fips, vault, terraform, opentofu...
CVE-2025-0377 vulnerabilities
Vulnerabilities for packages: opentofu-fips, vault, terraform, opentofu...
opentofu-1.8.6-1.1 on GA media (moderate)
opentofu-1.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14520-1 Rating: moderate Cross-References: CVE-2024-34156 CVSS scores: CVE-2024-34156 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
OPENSUSE-SU-2024:14520-1 opentofu-1.8.6-1.1 on GA media
These are all security issues fixed in the opentofu-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 41 : opentofu (2024-8669c2a944)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8669c2a944 advisory. Automatic update for opentofu-1.7.3-3.fc41. Changelog Sat Jul 27 2024 Mikel Olasagasti Uranga - 1.7.3-3 - Fix for CVE-2024-6257 CVE-2024-6104...
Information Exposure
github.com/opentofu/opentofu is vulnerable to Information Exposure. The vulnerability is due to the static evaluation of module sources, versions and backend configurations. An attacker can expose sensitive variables and locals...
GO-2024-3182 OpenTofu potential leaking of secret variable values when using static evaluation in v1.8 in github.com/opentofu/opentofu
OpenTofu potential leaking of secret variable values when using static evaluation in v1.8 in github.com/opentofu/opentofu...
OpenTofu potential leaking of secret variable values when using static evaluation in v1.8
Impact Users who have opted into static evaluation of module sources, versions, and backend configurations may be at risk of exposing sensitive variables and locals. This is a workflow that should not be possible and explicitly show errors. Workarounds Check that you are not using sensitive...
GHSA-WPR2-J6GR-PJW9 OpenTofu potential leaking of secret variable values when using static evaluation in v1.8
Impact Users who have opted into static evaluation of module sources, versions, and backend configurations may be at risk of exposing sensitive variables and locals. This is a workflow that should not be possible and explicitly show errors. Workarounds Check that you are not using sensitive...
PT-2026-73142
Name of the Vulnerable Software and Affected Versions OpenTofu versions 1.8.0 through 1.8.2 Description Sensitive variables and locals are not properly restricted when static evaluation of module sources, versions, and backend configurations is enabled. This allows values marked as sensitive to b...
[SECURITY] Fedora 40 Update: opentofu-1.8.0-1.fc40
OpenTofu lets you declaratively manage your cloud infrastructure...
[SECURITY] Fedora 39 Update: opentofu-1.8.0-1.fc39
OpenTofu lets you declaratively manage your cloud infrastructure...
Fedora 39 : opentofu (2024-35147eb6ad)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-35147eb6ad advisory. Update to 1.8.0 ---- Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 Tenable has extracted the preceding description block directly from the Fedo...
Fedora 40 : opentofu (2024-c83208238d)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c83208238d advisory. Update to 1.8.0 ---- Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 Tenable has extracted the preceding description block directly from the Fedo...
Fedora: Security Advisory (FEDORA-2024-35147eb6ad)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-c83208238d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
