CLEANSTART-2026-LN96571 Security fixes in opentofu-fips 1.11.7-r0

Package opentofu-fips version 1.11.7-r0 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-JN77372 Security fixes in opentofu-fips 1.10.10-r0

Package opentofu-fips version 1.10.10-r0 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-AZ25301 Security fixes in opentofu-fips 1.10.9-r1

Package opentofu-fips version 1.10.9-r1 fixes 2 vulnerabilities: CVE-2026-1229, CVE-2026-24051...

CLEANSTART-2026-QW04025 Security fixes in opentofu-fips 1.11.5-r3

Package opentofu-fips version 1.11.5-r3 fixes 16 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-RZ67002 Security fixes in opentofu-fips 1.10.9-r2

Package opentofu-fips version 1.10.9-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-FG71338 Security fixes in opentofu-fips 1.8.11-r5

Package opentofu-fips version 1.8.11-r5 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-ME41456 Security fixes in opentofu-fips 1.9.4-r0

Package opentofu-fips version 1.9.4-r0 fixes 5 vulnerabilities: ghsa-hcg3-q754-cr77, ghsa-mh63-6h87-95cp, ghsa-c6gw-w398-hv78, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-SH34049 Security fixes in opentofu-fips 1.10.7-r1

Package opentofu-fips version 1.10.7-r1 fixes 6 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-wjrx-6529-hcj3, ghsa-2464-8j7c-4cjm, ghsa-fv92-fjc5-jj9h, ghsa-jc7w-c686-c4v9...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.5-0.2.hum1 aarch64, x8664 opentofu1.12-1.12.5-0.2.hum1.src src Security Fixes: opentofu1.12: CVE-2026-56852...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.10: opentofu1.10-1.10.10-0.3.hum1 aarch64, x8664 opentofu1.10-1.10.10-0.3.hum1.src src Security Fixes: opentofu1.10: CVE-2026-56852...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: zot, keda-fips, cloudbeat-fips, calico-fips, kubevela-fips, gatekeeper-fips, kubescape-server-fips, argocd-image-updater, kaf, kubescape-server, opentofu-fips, frankenphp-8.4, omnictl-multiarch, chisel, external-dns, zarf-fips, kube-state-metrics, coder-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, crossplane-provider-azure-purview, jfrog-cli, crossplane-provider-azure-network, zot, atlantis-fips, grype-fips, redpanda-console, keda-fips, cloudbeat-fips, crossplane-provider-family-azure, docker-cli-buildx-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zot, keda-fips, cloudbeat-fips, calico-fips, kubevela-fips, gatekeeper-fips, kubescape-server-fips, argocd-image-updater, kaf, kubescape-server, opentofu-fips, frankenphp-8.4, omnictl-multiarch, chisel, external-dns, zarf-fips, kube-state-metrics, coder-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: jfrog-cli, zot, grype-fips, redpanda-console, keda-fips, cloudbeat-fips, calico-fips, kubevela-fips, splunk-otel-collector-fips, gatekeeper-fips, chainctl, guac, kubescape-server-fips, melange, argocd-image-updater, kaf, kubescape-server, opentofu-fips, podman,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: zot, keda-fips, docker-cli-buildx-fips, buildah, calico-fips, gatekeeper-fips, kaf, opentofu-fips, podman, frankenphp-8.4, docker-cli-buildx, omnictl-multiarch, external-dns, kube-state-metrics, packer-fips, frankenphp-8.2, prometheus, argo-workflows-fips, terraform,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-source-controller, datadog-agent, osv-scanner, cosign, ko, pulumi-language-java, wolfictl, containerd, cloud-provider-aws, teleport, hcloud, scorecard, zarf, buildah, falco-no-driver, pulumi-kubernetes-operator, minio, loki, sops, rancher, wal-g,...

GO-2026-5705 OpenTofu: Provider cache installation follows root-module-controlled package directory symlink and writes outside the working tree in github.com/opentofu/opentofu

OpenTofu: Provider cache installation follows root-module-controlled package directory symlink and writes outside the working tree in github.com/opentofu/opentofu...

GO-2026-5571 OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL in github.com/opentofu/opentofu

OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL in github.com/opentofu/opentofu...

GO-2026-5558 OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server in github.com/opentofu/opentofu

OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server in github.com/opentofu/opentofu...

GO-2026-5441 OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses in github.com/opentofu/opentofu

OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses in github.com/opentofu/opentofu...