1.10.0

This release contains only non-critical updates to the rootfs. See the receipt changes at this commit for more information.

1.9.0

Notably, this release addresses USN-2740-1, "ICU vulnerabilities", which is related to:

• CVE-2015-1270
• CVE-2015-2632
• CVE-2015-4760

1.8.0

Notably, this release addresses USN-2739-1, "FreeType vulnerabilities".

1.7.0

Notably, this release addresses USN-2726-1, "Expat vulnerability", which is related to CVE-2015-1283.

1.6.0

Notably, this release addresses USN-2722-1, "gdk-pixbuf vulnerability".

1.5.0

Notably, this release addresses:

• USN-2710-1, "OpenSSH vulnerabilities"
• USN-2710-2, "openssh regression"

which are related to:

• CVE-2015-5352
• CVE-2015-5600

in addition to two other vulnerabilities which do not yet have CVE numbers assigned.

1.4.0

This rootfs enables both DEAs and Diego to share the vcap user home and app directories. #97733540

Please note that the use of this rootfs (or later rootfses) in cf-release v212 or earlier will require the following commit to be applied to cf-release:

cloudfoundry-attic/cf-release@96823da

and the following commit to be applied to warden:

cloudfoundry-attic/warden@bc2c997

1.3.0

Notably, this version of the rootfs updates libsqlite3 to 3.8.2-1ubuntu2.1 to address USN-2698-1 "SQLite vulnerabilities" which addresses:

• CVE-2013-7443
• CVE-2015-3414
• CVE-2015-3416

1.2.0

Notably, this release addresses USN-2694-1 "PCRE vulnerabilities", which is related to:

• CVE-2014-8964
• CVE-2015-2325
• CVE-2015-2326
• CVE-2015-5073

This release also adds the following package to the rootfs:

• jq

1.1.0

Notably, this release addresses USN-2670-1: "libwmf vulnerabilitites", which is related to:

• CVE-2015-0848
• CVE-2015-4588
• CVE-2015-4695
• CVE-2015-4696