CLEANSTART-2026-IS48136 Security fixes in opentofu-fips 1.10.9-r0

Package opentofu-fips version 1.10.9-r0 fixes 2 vulnerabilities: CVE-2024-10005, CVE-2024-10006...

CLEANSTART-2026-AT41104 Security fixes in opentofu-fips 1.8.11-r3

Package opentofu-fips version 1.8.11-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-MY41612 Security fixes in opentofu-fips 1.10.9-r4

Package opentofu-fips version 1.10.9-r4 fixes 7 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-AZ25301 Security fixes in opentofu-fips 1.10.9-r1

Package opentofu-fips version 1.10.9-r1 fixes 2 vulnerabilities: CVE-2026-1229, CVE-2026-24051...

CLEANSTART-2026-JN77372 Security fixes in opentofu-fips 1.10.10-r0

Package opentofu-fips version 1.10.10-r0 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-LN96571 Security fixes in opentofu-fips 1.11.7-r0

Package opentofu-fips version 1.11.7-r0 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-ZV01443 Security fixes in opentofu-fips 1.7.10-r0

Package opentofu-fips version 1.7.10-r0 fixes 5 vulnerabilities: CVE-2025-61729, CVE-2025-61727, CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-QW04025 Security fixes in opentofu-fips 1.11.5-r3

Package opentofu-fips version 1.11.5-r3 fixes 16 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-QF23668 Security fixes in opentofu-fips 1.11.5-r0

Package opentofu-fips version 1.11.5-r0 fixes 2 vulnerabilities: CVE-2026-1229, CVE-2026-24051...

CLEANSTART-2026-FH57002 Security fixes in opentofu-fips 1.7.10-r2

Package opentofu-fips version 1.7.10-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-ON70708 Security fixes in opentofu-fips 1.11.5-r1

Package opentofu-fips version 1.11.5-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-SH34049 Security fixes in opentofu-fips 1.10.7-r1

Package opentofu-fips version 1.10.7-r1 fixes 6 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-wjrx-6529-hcj3, ghsa-2464-8j7c-4cjm, ghsa-fv92-fjc5-jj9h, ghsa-jc7w-c686-c4v9...

CLEANSTART-2026-ME41456 Security fixes in opentofu-fips 1.9.4-r0

Package opentofu-fips version 1.9.4-r0 fixes 5 vulnerabilities: ghsa-hcg3-q754-cr77, ghsa-mh63-6h87-95cp, ghsa-c6gw-w398-hv78, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-RZ67002 Security fixes in opentofu-fips 1.10.9-r2

Package opentofu-fips version 1.10.9-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-FG71338 Security fixes in opentofu-fips 1.8.11-r5

Package opentofu-fips version 1.8.11-r5 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.5-0.2.hum1 aarch64, x8664 opentofu1.12-1.12.5-0.2.hum1.src src Security Fixes: opentofu1.12: CVE-2026-56852...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.10: opentofu1.10-1.10.10-0.3.hum1 aarch64, x8664 opentofu1.10-1.10.10-0.3.hum1.src src Security Fixes: opentofu1.10: CVE-2026-56852...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: drone-fips, external-dns, frankenphp-8.3, opentofu, skaffold, prometheus-operator, seaweedfs-rocksdb-fips, frankenphp-8.2, gatekeeper-fips, containerd, trivy-operator-fips, omnictl-multiarch-fips, frankenphp-8.4, trivy, upwind-agent, harbor-fips, kyverno, harbor,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: step-kms-plugin-fips, crossplane-provider-azure-operationsmanagement, drone-fips, gomplate, crossplane-provider-azure-operationalinsights, guac, act, external-dns, pulumi, crossplane-provider-azure-servicenetworking, crossplane-provider-azure-web, docker-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone-fips, external-dns, frankenphp-8.3, opentofu, skaffold, prometheus-operator, seaweedfs-rocksdb-fips, frankenphp-8.2, gatekeeper-fips, containerd, trivy-operator-fips, omnictl-multiarch-fips, frankenphp-8.4, trivy, upwind-agent, harbor-fips, kyverno, harbor,...