AI-analyzed release notes for CNCF graduated and incubating projects.
A maintenance release with a security fix for unbounded reads in the Terraform remote configuration loader and a correctness fix for CUE imports in status details. It also adds repository ownership metadata.
Check if affected (1)
securityUnbounded read prevention in the Terraform remote configuration loader
Applies if you use the Terraform remote configuration loader.
The Terraform remote configuration loader now prevents unbounded reads. This fix addresses GHSA-fmgp-q6jx-gg3x.
This release includes a security correction for an unbounded-read denial-of-service condition in the Terraform remote configuration loader. The fix is backported to release-1. and concerns deployments that use this loader.
Check if affected (1)
securityTerraform remote configuration loader DoS fix (GHSA-fmgp-q6jx-gg3x)
Applies if you use the Terraform remote configuration loader.
The release-1. backport prevents unbounded reads with a shallow-depth-1 clone, a 2-minute fetch timeout, 64 MiB and file-count caps, regular-file and in-cache-path validation, symlink rejection, cache invalidation when the URL changes, and cleanup after rejected reads. The fix ships in v1..
