platformchangelog.dev
43 tools
feedrelease

OpenTofu v1.11.14

security!!

Changes

  • When interacting with OCI Distribution registries for module or provider package installation, previous versions of OpenTofu could incorrectly resend credentials intended for the original origin to the target of an HTTP redirect.security
  • When interacting with an attacker-controlled remote state backend or provider/module registry, tofu init in earlier versions of OpenTofu could potentially cause high CPU usage and/or high memory usage resolving crafted relative URLs in the API responses.security
2 lines2 securitytyped from the source notes

Full release notes ↗ · all OpenTofu releases

Report a mistake

context

Tools

OpenTofu

Other OpenTofu releases

How this was written

The change list is the project's own release notes, sorted into change types by fixed rules. See the methodology.

Back to the feed

OpenTofu v1.11.14 release notes | Platform Changelog