Alpine/opentofu: medium 6.5
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructe
Action: Upgrade opentofu to 1.11.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.4-r0 | - |
Fixed versions
| 1.11.4-r0 |
Sources
- osv: ALPINE-CVE-2025-61728#Alpine:v3.24/opentofu
- https://security.alpinelinux.org/vuln/CVE-2025-61728
published · modified · JSON