cf/257
You can find the source of this version on GitHub at cloudfoundry/cf-release. It was created based on the commit f7a37811
.
Release Notes¶
Contents - Notices - Job Spec Changes - Security Notices - Compatible Releases and Stemcells - Subcomponent Updates
Notices
- Warning: We’ve found an issue with the combination of releases recommended here, so we advise deployers to use CF 258 instead. Specifically, the recommended version of diego-release (1.13.0) does not allow deployers to configure
cleanup_process_dirs_on_wait
, which is required for healthy functioning of the recommended garden-runc-release (1.5.0). Diego-release 1.14.0 includes the ability to configure that property. - Changes in some jobs require using a BOSH Director v258 or newer.
- Changing the number of instances of doppler with restart Traffic Controllers resulting in disruption in Firehose throughput.
- The included version of Loggregator restricts ciphers to use only the following 4 ciphers. This is a breaking change for some operators and a configurable property for opting into more cipher suites was introduced in Loggregator 85 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Job Spec Changes
- The cc_uploader job has new required properties. Read here for details
Security Notices
Affecting v257
- None
Resolved in v257
- CVE-2017-4972: Blind SQL Injection in UAA (high severity)
- CVE-2017-4973: Privilege Escalation in UAA (high severity)
Subcomponent Updates
- Cloud Controller and Service Broker API:
- Identity:
- Routing:
- Loggregator:
- Java Buildpack:
- java-buildpack v3.15 (no change)
- Ruby Buildpack:
- ruby-buildpack v1.6.37 (no change)
- Go Buildpack:
- go-buildpack v1.7.19 (no change)
- Node.js Buildpack:
- nodejs-buildpack v1.5.31 (no change)
- Python Buildpack:
- python-buildpack v1.5.17 (no change)
- PHP Buildpack:
- php-buildpack v4.3.30 (no change)
- Staticfile Buildpack:
- staticfile-buildpack v1.4.4 (no change)
- Binary Buildpack:
- binary-buildpack v1.0.11 (no change)
- .Net Core Buildpack:
- dotnet-core-buildpack v1.0.15 (no change)
- RootFS:
- cflinuxfs2 v1.113.0 (no change)
- Consul:
- consul-release v152 (no change)
- Etcd:
- NATS:
- No change.
- Postgres:
- DEA-Warden-HM9000:
- No change.
Compatible Releases and Stemcells
Usage¶
You can reference this release in your deployment manifest from the releases
section:
- name: "cf" version: "257" url: "https://bosh.io/d/github.com/cloudfoundry/cf-release?v=257" sha1: "d25c454f551017196a5aa4690d80fd261561ac49"
Or upload it to your director with the upload-release
command:
bosh upload-release --sha1 d25c454f551017196a5aa4690d80fd261561ac49 \ "https://bosh.io/d/github.com/cloudfoundry/cf-release?v=257"
Jobs¶
- acceptance-tests
- binary-buildpack
- blobstore
- cc_uploader
- cloud_controller_clock
- cloud_controller_ng
- cloud_controller_worker
- collector
- consul_agent
- consul_agent_windows
- dea_logging_agent
- dea_next
- debian_nfs_server
- doppler
- dotnet-core-buildpack
- etcd
- etcd_metrics_server
- go-buildpack
- gorouter
- haproxy
- hm9000
- java-buildpack
- java-offline-buildpack
- loggregator_trafficcontroller
- metron_agent
- metron_agent_windows
- nats
- nats_stream_forwarder
- nfs_mounter
- nodejs-buildpack
- nsync
- php-buildpack
- postgres
- python-buildpack
- route_registrar
- ruby-buildpack
- smoke-tests
- smoke-tests-windows
- stager
- staticfile-buildpack
- statsd_injector
- syslog_drain_binder
- tps
- uaa
Packages¶
- acceptance-tests
- binary-buildpack
- blobstore_url_signer
- capi_utils
- cc_uploader
- cli
- cli-network-policy-plugin
- cli-windows
- cloud_controller_ng
- collector
- common
- confab
- confab-windows
- consul
- consul-windows
- dea_logging_agent
- dea_next
- debian_nfs_server
- doppler
- dotnet-core-buildpack
- etcd
- etcd-common
- etcd-consistency-checker
- etcd-dns-checker
- etcd_metrics_server
- gnatsd
- go-buildpack
- golang1.7
- golang1.7-windows
- golang1.8
- gorouter
- haproxy
- hm9000
- java-buildpack
- java-offline-buildpack
- libmariadb
- libpq
- loggregator_common
- loggregator_trafficcontroller
- metron_agent
- metron_agent_windows
- nats
- nats-common
- nginx
- nginx_newrelic_plugin
- nginx_webdav
- nodejs-buildpack
- nsync
- php-buildpack
- postgres-9.4.9
- postgres-9.6.2
- postgres-common
- python-buildpack
- rootfs_cflinuxfs2
- route_registrar
- routing_utils
- ruby-2.1.8
- ruby-2.2.5
- ruby-2.3
- ruby-buildpack
- smoke-tests
- smoke-tests-windows
- stager
- staticfile-buildpack
- statsd_injector
- syslog_drain_binder
- tps
- uaa
- uaa_utils
- warden