v1.15.6
2026-06-11T08:51:46Z•f1a1a7b345f476b757f85145db815f51ea29ac0d912bc8409289ba2d6b3b0633
bugfixcrashdenial-of-servicehashicorp-terraforminitplan-fileprovider-installationrelease-notessensitive-datasupply-chainsymlink-attackterraformterraform-datav1.15.xv1.16-alpha
What happened
HashiCorp Terraform release notes covering v1.15.x and 1.16.0-alpha (Apr–Jun 2026). Key security-relevant items: a fix to prevent provider binaries being installed into symlinked directories (mitigates symlink/traversal/supply-chain risk during init), multiple crash/panic fixes during init, provider installation, plan evaluation, and module handling (mitigates potential DoS or unexpected behavior), and fixes around plan JSON representations and variable handling. New features introduce storage/handling for PlannedPrivate and ephemeral/sensitive values (terraform_data store block) which change/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hashicorp_terraform_releases
- Record identifier
- f1a1a7b345f476b757f85145db815f51ea29ac0d912bc8409289ba2d6b3b0633
- Enrichment time
- 2026-06-11T08:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.