OpenTofu
Notes
OpenTofu lets you declaratively manage your cloud infrastructure.
Release notes
v1.12.7
· today
SECURITY ADVISORIES:
-
When using either a
remote-execorfileprovisioner to connect to an attacker-controlled SSH server, the server could previously deadlock the connection by sending certain unexpected packet types. (#4551)This addresses the upstream Go security advisories CVE-2026-78662 and CVE-2026-56855.