This repository has been archived by the owner on Jan 21, 2022. It is now read-only.
v255
Contents
Notices
- MySQL UAA databases that were operating prior to UAA version 1.5.2 (released in early 2014) may be incompatible with migrations in this release, causing failures during the UAA job update. A manual fix for affected deployments can be found here.
- The included version of Loggregator restricts ciphers to use only the following 4 ciphers. This is a breaking change for some operators and a configurable property for opting into more cipher suites was introduced in Loggregator 85
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Job Spec Changes
- Diego's
cc_uploader
job has new required properties. Read here for details.
Security Notices
Affecting v255
- CVE-2017-4970 in Staticfile buildpack versions v1.4.0 – v1.4.3 (high severity)
Known Issues
- Users that belong to any space containing a user provided service instance are unable to view any specific service plan:
/v2/service_plans/:guid
. Users are still able to view the marketplace and provision service instances.
Subcomponent Updates
- Cloud Controller and Service Broker API:
- Identity:
- Routing: No changes
- Loggregator:
- Java Buildpack:
- java-buildpack v3.14 (no change)
- Ruby Buildpack:
- ruby-buildpack v1.6.35 (no change)
- Go Buildpack:
- go-buildpack v1.7.19 (no change)
- Node.js Buildpack:
- nodejs-buildpack v1.5.30 (no change)
- Python Buildpack:
- python-buildpack v1.5.16 (no change)
- PHP Buildpack:
- Staticfile Buildpack:
- Binary Buildpack:
- .Net Core Buildpack:
- RootFS:
- cflinuxfs2 v1.111.0 (Diego)
- cflinuxfs2 v1.112.0 (DEA)
- Consul:
- consul-release vCC (unchanged)
- Etcd:
- etcd-release vCC (unchanged)
- NATS: No changes.
- Postgres: No changes.
- DEA-Warden-HM9000: No changes.