release: github.com/cloudfoundry/cf-release / 243

Github source: ee7d0088 or master branch

The cf-release v243 was released on September 21, 2016.

IMPORTANT - This release addresses CVE-2016-6651 Privilege Escalation in UAA

Contents: - CC and Service Broker APIs - Identity - Routing - Loggregator - Buildpacks and Stacks - DEA-Warden-HM9000 Runtime - Internal Components - Recommended Versions of Additional Releases - Job Spec Changes - Recommended BOSH Stemcell Versions

CC and Service Broker APIs

No Change

Identity

This release includes UAA 3.7.3 This is a security release which addresses CVE-2016-6651 Privilege Escalation in UAA

Routing

Routing-release bumped to 0.138.0

Loggregator

No changes

Buildpacks and Stacks

java-buildpack

updated to v3.9 (from v3.8.1)

v3.9

I’m pleased to announce the release of the java-buildpack, version 3.9. This release has no theme per se, but has a number of important updates collected within it. - Dependencies are now hosted at https://java-buildpack.cloudfoundry.org (long live the Cloud Foundry Foundation!) - Azule Zulu JRE Support (via Ekaterina Blatova) - Updated Dynatrace support (via Alois Mayr)

For a more detailed look at the changes in 3.9, please take a look at the commit log.

DEA-Warden-HM9000 Runtime

No Change

Internal Components

postgres-release (includes postgres job)

  • No changes, still at v5.

etcd-release (includes etcd and etcd_metrics_server jobs)

  • No changes, still at v66.

consul-release (includes consul_agent job)

  • No changes, still at v110.

nats-release (includes nats and nats_stream_forwarder jobs)

  • No changes, still at v11.

Recommended Versions of Additional Releases

These versions are soft recommendations, as several different versions of these releases may work correctly with this version of cf-release. - Diego release v0.1485.0. Release notes for v0.1485.0. - Garden-Linux release v0.342.0. Release notes for v0.342.0. - etcd release v67. Release notes for v67. - cflinuxfs2-rootfs release v1.29.0. Release notes for v1.29.0.

Job Spec Changes

Recommended BOSH Stemcell Versions

  • real IaaS: 3262.14
  • BOSH-Lite: 3262.2

Note: For AWS you should use the Xen-HVM stemcells rather than Xen.

These are soft recommendations; several different versions of the stemcells are likely to work fine with this version of cf-release and the corresponding versions of the additional releases listed above.

Upload this release version to the Director:

$ bosh upload release https://bosh.io/d/github.com/cloudfoundry/cf-release?v=243

Modify deployment manifest to use this release in addition to any other used releases:

releases:
- {name: cf, version: "243"}

Finally add needed deployment jobs and specify values for required properties.

Optionally download sha1: 40aa9b5720cc15f6d19e8cef966d26405ec2a30b release tarball locally:

# ...or download it directly using curl
$ curl -L -J -O https://bosh.io/d/github.com/cloudfoundry/cf-release?v=243

# or with wget...
$ wget --content-disposition https://bosh.io/d/github.com/cloudfoundry/cf-release?v=243