Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 43 opentofu Critical Unbounded Allocation Threat 2026-49b5d5c5e6

fedora
Calendar Grey February 26, 2026
Dist Fedora Esm H88
Critical update for Fedora 43 opentofu addresses unbounded allocation issue improving cloud management.
Update to 1.11.5

Summary

OpenTofu lets you declaratively manage your cloud infrastructure.

Update Information:

Update to 1.11.5

Change Log

* Thu Feb 12 2026 Packit - 1.11.5-1 - Update to 1.11.5 upstream release - Resolves: rhbz#2439332 * Tue Feb 3 2026 Maxwell G - 1.11.4-2 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Wed Jan 21 2026 Packit - 1.11.4-1 - Update to 1.11.4 upstream release - Resolves: rhbz#2429160 * Fri Jan 16 2026 Fedora Release Engineering - 1.11.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2412594 - CVE-2025-58183 opentofu: Unbounded allocation when parsing GNU sparse map [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2412594

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-49b5d5c5e6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: opentofu
Product: Fedora 43
Version: 1.11.5
Release: 1.fc43
Summary: OpenTofu lets you declaratively manage your cloud infrastructure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here