OpenTofu v1.12.1
security***!!!
Changes
- Previous releases in the v1.12 series could be affected by several vulnerabilities:security
- Ssh usage through OpenTofu generate hangs or panics.security
- Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.security
- Address a bug introduced in v1.12.0 causing excessive memory usage by providers.fixed
- Address a bug introduced in v1.12.0 where replace_triggered_by was validated incorrectly.fixed
- The Azure key provider will now accept the tenant_id, subscription_id, environment, and metadata_host variables; a bug previously only allowed these to be set through environment variables.fixed
6 lines3 security3 fixedtyped from the source notes