You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -61,6 +65,20 @@ Below is a list of the most recent Terraform Enterprise Releases that can deploy
61
65
62
66
\** The release package contains this version of the Terraform CLI, but you can install older and newer versions of the Terraform CLI as needed via the Admin [UI](/terraform/enterprise/application-administration/resources#managing-terraform-versions) or [API](/terraform/enterprise/api-docs/admin/terraform-versions).
63
67
68
+
## 1.1.2
69
+
<spanclass="h4-size">2025-12-08</span>
70
+
71
+
Last required release: [v202406-1 (776)](/terraform/enterprise/releases/2024/v202406-1)
- Improve performance of List Workspace Variables API when working with significant amount of organizations and workspaces.
77
+
78
+
## Security
79
+
- Fixed an issue that let users without sufficient permissions create new state versions. To learn more about the previous issue, refer to [CVE-2025-13432](https://discuss.hashicorp.com/t/hcsec-2025-34-terraform-enterprise-state-versions-can-be-created-by-users-without-sufficient-write-access/76821).
Congratulations, if your name is on this list that means you contributed to this release. You must sign off on your
10
+
contributions by checking the box in front of your username. The number in front of your username is the number of pull
11
+
requests authored by you that are going into this release.
12
+
13
+
Please review the changelog entries for your contributions. Your changelog entries should be **feature-focused**, define
14
+
the **what** and **why**, and include any necessary information for customers. Each entry should make it clear why the
15
+
customer should care about the change. More information on
16
+
[how to write release notes can be found in confluence](https://hashicorp.atlassian.net/wiki/spaces/TFENG/pages/2369355816/How+to+Write+Release+Notes+for+TFE).
17
+
18
+
<!-- CUSTOMER_FACING_START_DELIMITER: The items in this section will be customer viewable -->
19
+
20
+
## Security
21
+
1. Fixed an issue that let users without sufficient permissions create new state versions. To learn more about the previous issue, refer to [CVE-2025-13432](https://discuss.hashicorp.com/t/hcsec-2025-34-terraform-enterprise-state-versions-can-be-created-by-users-without-sufficient-write-access/76821).
22
+
23
+
<!-- CUSTOMER_FACING_STOP_DELIMITER: Everything below this line will not be viewable by customers. -->
24
+
25
+
### Generated Changelog
26
+
27
+
The changelog below was generated by `scripts/changelog.rb`. It includes PRs merged from each repository in `app_repos.yaml`. The purpose of this generated changelog is to serve as starting place for constructing the customer facing changelog above.
28
+
29
+
#### Possible Customer Impacting Changes
30
+
31
+
These PRs included a changelog line the PR body. This changelog line has been used as the message below.
32
+
33
+
1. State versions could be created or removed with a combination of permissions that should not have allowed write access. This bug has been resolved, and only write permissions to the workspace or state versions should grant access to modify state versions. -- **@mkam**[atlas#25469](https://github.com/hashicorp/atlas/pull/25469)
1. Improve performance of List Workspace Variables API when working with significant amount of organizations and workspaces -- **@netramali**[atlas#25754](https://github.com/hashicorp/atlas/pull/25754)
38
+
39
+
#### Possible Non Customer Facing Changes
40
+
41
+
These PRs did not include a changelog line in the PR body. The PR title has been used as the message below.
42
+
43
+
1. Backport of Update Go to 1.25.3 to resolve various CVEs into release/1.1.x -- **@hc-tfe-release-bot**[archivist#461](https://github.com/hashicorp/archivist/pull/461)
44
+
1. Update Go to 1.25.3 to resolve various CVEs into release/1.1.x -- **@lafentres**[archivist#442](https://github.com/hashicorp/archivist/pull/442)
45
+
1. Backport #332 and #340 for 1.1.x -- **@james-warren0**[slug-ingress#348](https://github.com/hashicorp/slug-ingress/pull/348)
0 commit comments