v1.11.10
Changed 1
- Update documentation to clarify the usage restriction of ephemeral values in lifecycle.enabled
Fixed 1
- Prevent arbitrary file reads during certain git operations via maliciously crafted URLs
BUG FIXES:
- Update documentation to clarify the usage restriction of ephemeral values in
lifecycle.enabled. (#4220)
SECURITY ADVISORIES:
- Previous releases in the v1.11 series could read an arbitrary file during certain git operations via a maliciously crafted URL (#4292).
Full Changelog: https://github.com/opentofu/opentofu/compare/v1.11.9...v1.11.10