v266

Contents

• Notices
• Job Spec Changes
• Security Notices
• Compatible Releases and Stemcells
• Subcomponent Updates

Notices

• There are changes to the way Cloud Controller stores resource matched blobs. Read here for more information.

Job Spec Changes

• None

Security Notices

Affecting v266

• None

Resolved in v266

• CVE-2017-8032: UAA Identity Zone Admin Privilege Escalation

Subcomponent Updates

• Cloud Controller and Service Broker API:
  • capi-release 1.31.0
• Identity:
  • uaa-release v41
• Routing:
  • routing-release v0.157.0
• Loggregator:
  • Loggregator 90.1
  • statsd 1.0.28
• Java Buildpack:
  • java-buildpack v3.18
• Ruby Buildpack:
  • ruby-buildpack v1.6.41
• Go Buildpack:
  • go-buildpack v1.8.5
• Node.js Buildpack:
  • nodejs-buildpack v1.5.36 (no change)
• Python Buildpack:
  • python-buildpack v1.5.19 (no change)
• PHP Buildpack:
  • php-buildpack v4.3.35
• Staticfile Buildpack:
  • staticfile-buildpack v1.4.9
• Binary Buildpack:
  • binary-buildpack v1.0.13 (no change)
• .Net Core Buildpack:
  • dotnet-core-buildpack v1.0.20
• Consul:
  • consul-release v152 (no change)
• Etcd:
  • etcd-release v104 (no change)
• NATS:
  • nats-release v18 (no change)
• Postgres:
  • postgres-release v17 (no change)

Compatible Releases and Stemcells

• Diego release v1.19.0. Release notes for v1.19.0.
• Garden-Runc release v1.8.0. Release notes for v1.8.0.
• cflinuxfs2 release v1.133.0. Release notes for v1.133.0.
• cf-networking release v1.1.0. Release notes for v1.1.0.
• grootfs release v0.20.0. Release notes for v0.20.0.
• stemcell: 3421.9