Skip to content

v1.12.6

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Aug 11:40
· 312 commits to main since this release
v1.12.6
This tag was signed with the committer’s verified signature.
yottta Andrei Ciobanu
GPG key ID: 58C6DAFBD444BE45
Verified
Learn about vigilant mode.
b4305e5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SECURITY ADVISORIES:

  • When interacting with OCI Distribution registries for module or provider package installation, earlier versions of OpenTofu could incorrectly resend credentials intended for the original origin to the target of an HTTP redirect. (#4422)
  • When interacting with an attacker-controlled remote state backend or provider/module registry, tofu init in earlier versions of OpenTofu could potentially cause high CPU usage and/or high memory usage resolving crafted relative URLs in the API responses. (#4472)

Full Changelog: v1.12.5...v1.12.6

Assets 166
Loading