OpenTofu v1.12.1

v1.12.1
Fixed 3
  • Fix excessive memory usage by providers introduced in v1.12.0
  • Fix replace_triggered_by being validated incorrectly in v1.12.0
  • Allow Azure key provider to accept tenant_id, subscription_id, environment, and metadata_host variables instead of only through environment variables
Security 2
  • Fix ssh usage through OpenTofu generate hanging or panicking
  • Fix revoked SignatureKey belonging to a CA not being correctly checked for revocation by now checking both key and key.SignatureKey for @revoked
SECURITY ADVISORIES:

  • Previous releases in the v1.12 series could be affected by several vulnerabilities:

    • ssh usage through OpenTofu generate hangs or panics.
    • Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

    This is fixed now by (#4145)

BUG FIXES:
  • Address a bug introduced in v1.12.0 causing excessive memory usage by providers. (#4126)
  • Address a bug introduced in v1.12.0 where replace_triggered_by was validated incorrectly. (#4133
  • The Azure key provider will now accept the tenant_id, subscription_id, environment, and metadata_host variables; a bug previously only allowed these to be set through environment variables. (#4091)

Full Changelog: https://github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md

View original

Upgraded? How did it go?

Discussion