platformchangelog.dev
43 tools
feedrelease

OpenTofu v1.12.1

security***!!!

Changes

  • Previous releases in the v1.12 series could be affected by several vulnerabilities:security
  • Ssh usage through OpenTofu generate hangs or panics.security
  • Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.security
  • Address a bug introduced in v1.12.0 causing excessive memory usage by providers.fixed
  • Address a bug introduced in v1.12.0 where replace_triggered_by was validated incorrectly.fixed
  • The Azure key provider will now accept the tenant_id, subscription_id, environment, and metadata_host variables; a bug previously only allowed these to be set through environment variables.fixed
6 lines3 security3 fixedtyped from the source notes

Full release notes ↗ · all OpenTofu releases

Report a mistake

context

Tools

OpenTofu

Other OpenTofu releases

How this was written

The change list is the project's own release notes, sorted into change types by fixed rules. See the methodology.

Back to the feed