VMware Tanzu Application Service for VMs v2.12 Release Notes

Page last updated:

This topic contains release notes for VMware Tanzu Application Service for VMs (TAS for VMs) v2.12.

TAS for VMs is certified by the Cloud Foundry Foundation for 2022.

For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.

Required Cloud Foundry Command-Line Interface (cf CLI) version: You must install cf CLI v7 or cf CLI v8 when upgrading to or using TAS for VMs v2.12. For more information, see Upgrading to cf CLI v7 and Upgrading to cf CLI v8.


Releases

2.12.19

Release Date: 11/10/2022

  • [Security Fix] Bump of nodejs-offline-buildpack to version 4.8.3 fully addresses CVE-2022-3602 and CVE-2022-3786 in OpenSSL 3.x; impacted versions of OpenSSL are otherwise not used in this version line of TAS.
  • [Feature] Add “Max request header size in kb” property to Networking tab to allow operators to specify a limit on the aggregate size of request headers. Requests over this limit receive a 431 status code.
  • Bump backup-and-restore-sdk to version 1.18.57
  • Bump binary-offline-buildpack to version 1.0.47
  • Bump bosh-system-metrics-forwarder to version 0.0.27
  • Bump cf-autoscaling to version 249.0.23
  • Bump cf-networking to version 3.14.0
  • Bump cflinuxfs3 to version 0.332.0
  • Bump credhub to version 2.12.12
  • Bump dotnet-core-offline-buildpack to version 2.4.2
  • Bump garden-runc to version 1.22.5
  • Bump go-offline-buildpack to version 1.10.0
  • Bump java-offline-buildpack to version 4.53
  • Bump log-cache to version 2.12.3
  • Bump loggregator to version 106.7.3
  • Bump loggregator-agent to version 6.5.4
  • Bump mapfs to version 1.2.12
  • Bump metric-registrar to version 1.2.13
  • Bump metrics-discovery to version 3.2.3
  • Bump nginx-offline-buildpack to version 1.1.45
  • Bump nodejs-offline-buildpack to version 1.8.3
  • Bump php-offline-buildpack to version 4.4.67
  • Bump pxc to version 0.47.0
  • Bump r-offline-buildpack to version 1.1.34
  • Bump routing to version 0.244.0
  • Bump ruby-offline-buildpack to version 1.8.59
  • Bump smb-volume to version 3.1.6
  • Bump smoke-tests to version 4.8.1
  • Bump staticfile-offline-buildpack to version 1.5.35
  • Bump statsd-injector to version 1.11.25
  • Bump syslog to version 11.8.4
  • Bump uaa to version 74.5.57
Component Version Release Notes
ubuntu-xenial stemcell621.305
backup-and-restore-sdk1.18.57
v1.18.57
  ## Changes
  * Add a script that the autobumper task can use for ncurses (#739)
  * Prep for a gomega upgrade (#743)
  * Support mysql-8.0 on ubuntu-xenial stemcells (#738)
  * Update vendored package golang-1-linux (#745)
  * Wire in the ncurses autobumper from PR 739 (#740)
  * chore(dockerize-release): compile BOSH packages concurrently (#741)
  ## Dependencies
  * **gomega:** Updated to v1.23.0.
For more information, see [gomega](https://github.com/onsi/gomega). * **api:** Updated to v0.101.0.
For more information, see [api](https://github.com/googleapis/google-api-go-client). * **rspec:** Updated to v3.12.0.
For more information, see [rspec](https://github.com/rspec/rspec-metagem).
v1.18.55
  ## Changes
  * Bump mysql from 5.7.38 to 5.7.39 (#722)
  ## Dependencies
  * **gomega:** Updated to v1.22.1.
For more information, see [gomega](https://github.com/onsi/gomega).
v1.18.54
  ## Changes
  * Add a unit tests workflow for sdk-release-tests (#714)
  * Add airgap tests (#704)
  * Bump mariadb from 10.6.9 to 10.6.10 (#711)
  * Update vendored package golang-1-linux (#718)
  ## Dependencies
  * **storage:** Updated to v1.27.0.
For more information, see [storage](https://github.com/googleapis/google-cloud-go). * **api:** Updated to v0.98.0.
For more information, see [api](https://github.com/googleapis/google-api-go-client).
v1.18.53
  ## Changes
  * Update vendored package golang-1-linux (#677)
  ## Dependencies
  * **bosh-backup-and-restore:** Updated to v1.9.38.
For more information, see [bosh-backup-and-restore](https://github.com/cloudfoundry-incubator/bosh-backup-and-restore). * **pq:** Updated to v1.10.7.
For more information, see [pq](https://github.com/lib/pq). * **api:** Updated to v0.96.0.
For more information, see [api](https://github.com/googleapis/google-api-go-client).
v1.18.52
  ## Changes
  * Add final release 1.18.51 [ci skip]
  * Make the mysql8 packaging script work in airgapped environments (#703)
          
v1.18.51
  ## Changes
  * Add final release 1.18.50 [ci skip]
  * Feature/mysql 8 support (#702)
  ## Dependencies
  * **storage:** Updated to v1.26.0.
For more information, see [storage](https://github.com/googleapis/google-cloud-go). * **gomega:** Updated to v1.20.2.
For more information, see [gomega](https://github.com/onsi/gomega).
binary-offline-buildpack1.0.47
1.0.47
  * Update libbuildpack
  * Uncached buildpack SHA256: 4dd3ba6d0802797fd8a27f2624660aa877d7d6990c977e37f6391e6592376ca8
  * Uncached buildpack SHA256: f7cec524cf452026823432b755e3acdffc39a0f498272d0be8bddec00ec16d67
  * Uncached buildpack SHA256: c65dae7aaa1e4744fcac88d48f6aac3c85012cb6f42b671798a7a50300e6a333
          
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.27
bpm1.1.19
capi1.117.9
cf-autoscaling249.0.23
cf-cli1.41.0
cf-networking3.14.0
cflinuxfs30.332.0
credhub2.12.12
2.12.12
  ### Fixes
  - Handles Postgres queries when there are more than 65535 certificates that the user has permission to access.
  ### Security Fixes
  - Bump various dependencies
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.11...2.12.12
          
2.12.11
  ### Security Fixes
  - Bump various dependencies
          
diego2.69.0
dotnet-core-offline-buildpack2.4.2
2.4.2
  * Add node 16.18.0, remove node 16.17.0 for stack(s) cflinuxfs3, cflinuxfs4
  * Add dotnet-sdk 3.1.424, remove dotnet-sdk 3.1.423 for stack(s) cflinuxfs3
  * Add dotnet-runtime 3.1.30, remove dotnet-runtime 3.1.29 for stack(s) cflinuxfs3
  * Add dotnet-aspnetcore 3.1.30, remove dotnet-aspnetcore 3.1.29 for stack(s) cflinuxfs3
  * Add dotnet-sdk 6.0.402, remove dotnet-sdk 6.0.401 for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-runtime 6.0.10, remove dotnet-runtime 6.0.9 for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-aspnetcore 6.0.10, remove dotnet-aspnetcore 6.0.9 for stack(s) cflinuxfs4, cflinuxfs3
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | bower | 1.8.14 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 3.1.30 | cflinuxfs3 |
  | dotnet-aspnetcore | 6.0.10 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 3.1.30 | cflinuxfs3 |
  | dotnet-runtime | 6.0.10 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 3.1.424 | cflinuxfs3 |
  | dotnet-sdk | 6.0.402 | cflinuxfs3, cflinuxfs4 |
  | libgdiplus | 6.1 | cflinuxfs3 |
  | libgdiplus | 6.1 | cflinuxfs4 |
  | libunwind | 1.6.2 | cflinuxfs3 |
  | libunwind | 1.6.2 | cflinuxfs4 |
  | node | 16.18.0 | cflinuxfs3 |
  | node | 16.18.0 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | dotnet-runtime | 6.0.x |
  | dotnet-aspnetcore | 6.0.x |
  | dotnet-sdk | 6.0.x |
  | bower | 1.8.x |
  * Uncached buildpack SHA256: 6d39ad86c292780ffb933b17b9ea2b3dbf8dfc8a4051e6b8eee4a287a48fad89
  * Uncached buildpack SHA256: 19e73da01d2aa75447f8e77486222601fe0d88c92f3661e9646151c9ba49e814
          
garden-runc1.22.5
go-offline-buildpack1.10.0
1.10.0
  * Add support for cflinuxfs4 stack
  * Add go 1.19.2, remove go 1.19 for stack(s) cflinuxfs4, cflinuxfs3
  * Update Go Buildpack dependencies to only keep 1 of each patch version (latest)
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | dep | 0.5.4 | cflinuxfs3 |
  | dep | 0.5.4 | cflinuxfs4 |
  | glide | 0.13.3 | cflinuxfs3 |
  | glide | 0.13.3 | cflinuxfs4 |
  | go | 1.18.7 | cflinuxfs3 |
  | go | 1.18.7 | cflinuxfs4 |
  | go | 1.19.2 | cflinuxfs3 |
  | go | 1.19.2 | cflinuxfs4 |
  | godep | 80 | cflinuxfs3 |
  | godep | 80 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | go | 1.18.x |
  * Uncached buildpack SHA256: 35f3b6b61c19104db056610fea83cc19b3c04788aec3772be4c0c9d4a46fc50f
  * Uncached buildpack SHA256: 802aa0da6b655ad5f05ccbba452d609a77a61a7daf4d7a05c1ce493a90de8256
          
haproxy11.10.2
java-offline-buildpack4.53
4.53
  I'm pleased to announce the release of the java-buildpack, version 4.53. It primarily includes new OpenJDK versions, which are based on the Oracle Java Quarterly Updates for Oct 2022.
  -  This release also includes an enhancement to the Sealights framework, more field are supported for a User-Provided service (Thanks to @alonweiss-sl via #964)
  ## 🚨 Deprecation of Spring Cloud Connectors & Spring Auto Reconfiguration 🚨
  This release reverts the change made in v4.51 which disabled the Spring Auto Reconfiguration framework by default. From this release, it will be enabled by default as per all versions < 4.51. This is to provide users with more time to migrate to the recommended alternative library, `java-cfenv`. The default of disabled will now happen in a release after March 2023, and the library will be completely removed in a release after March 2024. As before, you may [post feedback/comments to this issue](https://github.com/cloudfoundry/java-buildpack/issues/951).
  For a more detailed look at the changes in 4.53, please take a look at the [commit log](https://github.com/cloudfoundry/java-buildpack/compare/v4.52...v4.53). The packaged version of the buildpack, suitable for use with create-buildpack and update-buildpack, can be found attached to this release.
  | Dependency | Version | CVEs | Release Notes |
  | ---------- | ------- | ---- | ------------- |
  | AppDynamics Agent | `22.9.1_34265` | | [Release Notes](https://docs.appdynamics.com/4.5.x/en/product-and-release-announcements/release-notes/language-agent-notes/java-agent-notes) |
  | Azure Application Insights Agent | `2.6.2` | | [Release Notes](https://github.com/Microsoft/ApplicationInsights-Java/releases) |
  | CA Introscope APM Framework | `22.8.0_48` | |  |
  | Client Certificate Mapper | `1.11.0_RELEASE` |Included inline above | Included inline above |
  | Container Security Provider | `1.19.0_RELEASE` |Included inline above | Included inline above |
  | Contrast Security Agent | `3.18.1` | | [Release Notes](https://docs.contrastsecurity.com/en/java-agent-release-notes.html) |
  | Datadog APM Javaagent | `0.114.0` | | [Release Notes](https://github.com/DataDog/dd-trace-java/releases) |
  | Elastic APM Agent | `1.34.1` | | [Release Notes](https://www.elastic.co/guide/en/apm/agent/java/current/release-notes.html) |
  | Gemalto Luna Security Provider | `7.4.0` | | [Release Notes](https://www.thalesdocs.com/gphsm/luna/7/docs/network/Content/CRN/Luna/CRN_Luna.htm) |
  | Geode Tomcat Session Store | `1.12.5` | |  |
  | Google Stackdriver Debugger | `2.32.0` | | [Release Notes](https://cloud.google.com/debugger/docs/release-notes) |
  | Google Stackdriver Profiler | `0.1.0` | | [Release Notes](https://cloud.google.com/profiler/docs/release-notes) |
  | Groovy | `2.5.19` | | [Release Notes](http://www.groovy-lang.org/releases.html) |
  | JaCoCo Agent | `0.8.8` | | [Release Notes](https://github.com/jacoco/jacoco/releases) |
  | Java Memory Assistant Agent | `0.5.0` | |  |
  | Java Memory Assistant Clean Up | `0.1.0` | |  |
  | JProfiler Profiler | `12.0.4` | | [ChangeLog](https://www.ej-technologies.com/download/jprofiler/changelog.html) |
  | JRebel Agent | `2022.4.1` | | [ChangeLog](https://www.jrebel.com/products/jrebel/changelog) |
  | jvmkill Agent | `1.17.0_RELEASE` |Included inline above | Included inline above |
  | MariaDB JDBC Driver | `2.7.2` | | [Release Notes](https://mariadb.com/kb/en/mariadb-connector-j-274-release-notes/) |
  | Memory Calculator | `3.13.0_RELEASE` |Included inline above | Included inline above |
  | Metric Writer | `3.5.0_RELEASE` |Included inline above | Included inline above |
  | New Relic Agent | `7.11.0` | | [Release Notes](https://docs.newrelic.com/docs/release-notes/agent-release-notes/java-release-notes/) |
  | OpenJDK JRE 11 | `11.0.17_7` |[Risk Matrix](https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixJAVA) | [Release Notes](https://bell-sw.com/pages/liberica-release-notes-11.0.17/) |
  | OpenJDK JRE 17 | `17.0.5_8` |[Risk Matrix](https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixJAVA) | [Release Notes](https://bell-sw.com/pages/liberica-release-notes-17.0.5/) |
  | OpenJDK JRE 8 | `1.8.0_352` |[Risk Matrix](https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixJAVA) | [Release Notes](https://bell-sw.com/pages/liberica-release-notes-8u352/) |
  | PostgreSQL JDBC Driver | `42.5.0` | | [ChangeLog](https://jdbc.postgresql.org/documentation/changelog.html) |
  | Redis Session Store | `1.3.6_RELEASE` |Included inline above | Included inline above |
  | Riverbed Appinternals Agent | `11.8.5_BL527` | |  |
  | SeaLights Agent | `4.0.2145` | |  |
  | SkyWalking | `8.9.0` | | [ChangeLog](https://github.com/apache/skywalking/tree/master/changes) |
  | Spring Auto-reconfiguration | `2.12.0_RELEASE` |Included inline above | Included inline above |
  | Spring Boot CLI | `2.7.5` | |  |
  | Spring Boot Container Customizer | `2.6.0_RELEASE` |Included inline above | Included inline above |
  | Tomcat | `9.0.68` |[Security](https://tomcat.apache.org/security-9.html) | [ChangeLog](https://tomcat.apache.org/tomcat-9.0-doc/changelog.html) |
  | Tomcat Access Logging Support | `3.3.0_RELEASE` |Included inline above | Included inline above |
  | Tomcat Lifecycle Support | `3.3.0_RELEASE` |Included inline above | Included inline above |
  | Tomcat Logging Support | `3.3.0_RELEASE` |Included inline above | Included inline above |
  | YourKit Profiler | `2022.9.171` | | [Release Notes](https://www.yourkit.com/download/yjp_2022_3_builds.jsp) |
          
log-cache2.12.3
loggregator106.7.3
loggregator-agent6.5.4
mapfs1.2.12
v1.2.12
  ## Changes
  * Replace `go get` with `go install` (#23)
  * Update vendored package golang-1-linux (#26)
  * Update vendored package golang-1-linux (#27)
  ## Dependencies
  * **mapfs:** Updated to v`27f8711`.
For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
metric-registrar1.2.13
metrics-discovery3.2.3
mysql-monitoring9.22.0
nats42
nfs-volume7.1.3
nginx-offline-buildpack1.1.45
1.1.45
  * Add nginx 1.23.2, remove nginx 1.23.1 for stack(s) cflinuxfs3
  * Add nginx 1.22.1, remove nginx 1.22.0 for stack(s) cflinuxfs3
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | nginx | 1.22.1 | cflinuxfs3 |
  | nginx | 1.23.2 | cflinuxfs3 |
  | openresty | 1.13.6.2 | cflinuxfs3 |
  | openresty | 1.15.8.3 | cflinuxfs3 |
  | openresty | 1.17.8.2 | cflinuxfs3 |
  | openresty | 1.19.9.1 | cflinuxfs3 |
  | openresty | 1.21.4.1 | cflinuxfs3 |
  Default binary versions:
  | name | version |
  |-|-|
  | nginx | 1.23.x |
  * Uncached buildpack SHA256: 59553ae241975530230e065f996a0434b7a85df061b3d79ec8f3073f3701c720
          
1.1.44
  * Update libbuildpack
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | nginx | 1.22.0 | cflinuxfs3 |
  | nginx | 1.23.1 | cflinuxfs3 |
  | openresty | 1.13.6.2 | cflinuxfs3 |
  | openresty | 1.15.8.3 | cflinuxfs3 |
  | openresty | 1.17.8.2 | cflinuxfs3 |
  | openresty | 1.19.9.1 | cflinuxfs3 |
  | openresty | 1.21.4.1 | cflinuxfs3 |
  Default binary versions:
  | name | version |
  |-|-|
  | nginx | 1.23.x |
  * Uncached buildpack SHA256: 29cc1a2aea42cfb654f31ee6e0c7bdb14521679fab127b26fa396b055b9c8033
          
nodejs-offline-buildpack1.8.3
1.8.3
  * Add node 18.12.1, remove node 18.9.0
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add node 14.21.1, remove node 14.20.0
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add node 16.18.1, remove node 16.17.1
  for stack(s) cflinuxfs3, cflinuxfs4
  (https://www.pivotaltracker.com/story/show/183724805)
  * Bumps go.mod go version to 1.19
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | node | 14.20.1 | cflinuxfs3 |
  | node | 14.20.1 | cflinuxfs4 |
  | node | 14.21.1 | cflinuxfs3 |
  | node | 14.21.1 | cflinuxfs4 |
  | node | 16.18.0 | cflinuxfs3 |
  | node | 16.18.0 | cflinuxfs4 |
  | node | 16.18.1 | cflinuxfs3 |
  | node | 16.18.1 | cflinuxfs4 |
  | node | 18.10.0 | cflinuxfs3 |
  | node | 18.10.0 | cflinuxfs4 |
  | node | 18.12.1 | cflinuxfs3 |
  | node | 18.12.1 | cflinuxfs4 |
  | yarn | 1.22.19 | cflinuxfs3, cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | node | 16.x |
  * Uncached buildpack SHA256: 2891efd8d931f6e7c10253bc116cb90544a086a47966532eee13af60414f1ede
  * Uncached buildpack SHA256: cf64d739fafe8a94abff4573cccabf1873e96b923c6f744de14c2e5e106f5903
          
1.8.2
  * Add node 16.18.0, remove node 16.17.0 for stack(s) cflinuxfs4, cflinuxfs3
  * Adding error message when npm install fails (#522)
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | node | 14.20.0 | cflinuxfs3 |
  | node | 14.20.0 | cflinuxfs4 |
  | node | 14.20.1 | cflinuxfs3 |
  | node | 14.20.1 | cflinuxfs4 |
  | node | 16.17.1 | cflinuxfs3 |
  | node | 16.17.1 | cflinuxfs4 |
  | node | 16.18.0 | cflinuxfs4 |
  | node | 16.18.0 | cflinuxfs3 |
  | node | 18.9.0 | cflinuxfs3 |
  | node | 18.9.0 | cflinuxfs4 |
  | node | 18.10.0 | cflinuxfs3 |
  | node | 18.10.0 | cflinuxfs4 |
  | yarn | 1.22.19 | cflinuxfs3, cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | node | 16.x |
  * Uncached buildpack SHA256: fa3ba16a26ff03da9312e4717bbcd4640a8bf1d1d275193980075209a2c4cd62
  * Uncached buildpack SHA256: 65afb62e378e5d9ba02d1ca6184aca3fcc901d772464e4e254594b6ee7342136
          
1.8.0
  * Add support for cflinuxfs4 stack
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | node | 14.19.3 | cflinuxfs3 |
  | node | 14.20.0 | cflinuxfs3 |
  | node | 14.20.0 | cflinuxfs4 |
  | node | 16.16.0 | cflinuxfs3 |
  | node | 16.17.0 | cflinuxfs3 |
  | node | 16.17.0 | cflinuxfs4 |
  | node | 18.7.0 | cflinuxfs3 |
  | node | 18.9.0 | cflinuxfs3 |
  | node | 18.9.0 | cflinuxfs4 |
  | yarn | 1.22.19 | cflinuxfs3, cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | node | 16.x |
  * Uncached buildpack SHA256: 9c916f1475c3ebfa8cb1531a31a6b70829b29e36380d3496dd105c2d8109c5de
  * Uncached buildpack SHA256: 7b59d44895ad526dd3f87bf176a5fd7a08f55f0cf4f91dcb8b2c1fa474292385
          
notifications62
notifications-ui40
php-offline-buildpack4.4.67
4.4.67
  * Add php 7.4.32, remove php 7.4.29 for stack(s) cflinuxfs3
  * Add php 8.1.11, remove php 8.1.9 for stack(s) cflinuxfs3
  * Add php 8.0.24, remove php 8.0.22 for stack(s) cflinuxfs3
  * Add composer 2.4.2, remove composer 2.4.1 for stack(s) cflinuxfs3
  Packaged binaries:
  | name | version | cf_stacks | modules |
  |-|-|-|-|
  | CAAPM | 20.11.0 | cflinuxfs3 |  |
  | appdynamics | 22.8.0-588 | cflinuxfs3 |  |
  | composer | 2.4.2 | cflinuxfs3 |  |
  | httpd | 2.4.54 | cflinuxfs3 |  |
  | newrelic | 9.20.0.310 | cflinuxfs3 |  |
  | nginx | 1.22.0 | cflinuxfs3 |  |
  | nginx | 1.23.1 | cflinuxfs3 |  |
  | php | 7.4.30 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lua, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, protobuf, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xmlrpc, xsl, yaf, yaml, zip, zlib |
  | php | 7.4.32 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lua, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, protobuf, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xmlrpc, xsl, yaf, yaml, zip, zlib |
  | php | 8.0.23 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.0.24 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.1.10 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pgsql, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, ssh2, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.1.11 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pgsql, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, ssh2, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  Default binary versions:
  | name | version |
  |-|-|
  | php | 7.4.32 |
  | httpd | 2.4.54 |
  | newrelic | 9.20.0.310 |
  | nginx | 1.23.1 |
  | composer | 2.4.2 |
  | CAAPM | 20.11.0 |
  * Uncached buildpack SHA256: 637cbc9daa642ce3d3f42377ea2d0555d3db0959e9fedd81fa1a2fc0e2097000
          
push-apps-manager-release675.0.5
push-usage-service-release674.0.25
pxc0.47.0
python-offline-buildpack1.8.0
r-offline-buildpack1.1.34
1.1.34
  * Update r 4.2.1 dependencies for stack(s) cflinuxfs3:
  * forecast from 8.17.0 to 8.18.0
  Packaged binaries:
  | name | version | cf_stacks | modules |
  |-|-|-|-|
  | r | 3.6.2 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  | r | 3.6.3 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  | r | 4.2.0 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  | r | 4.2.1 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  * Uncached buildpack SHA256: f93a3cbfb21e159a96c84c61dec8911ea7c4337fe664da2dcc70ca5efe7ed13d
          
routing0.244.0
v0.244.0
  ## What's Changed
  * Emit access logs for 431 responses to Loggegator [gorouter PR #331](https://github.com/cloudfoundry/gorouter/pull/331). Thanks @dsabeti !
  * Always suspend pruning when nats is down https://github.com/cloudfoundry/routing-release/pull/287. Thanks @ameowlia !
  * **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.243.0...v0.244.0
  ## ✨  Built with go 1.19.2
          
v0.243.0
  🎉 Bumped to go1.19.2
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.242.0...v0.243.0
          
ruby-offline-buildpack1.8.59
1.8.59
  * Add bundler 2.3.24, remove bundler 2.3.22 for stack(s) cflinuxfs3
  * Add jruby 9.3.8.0, remove jruby 9.3.7.0 for stack(s) cflinuxfs3
  * Add node 16.18.0, remove node 16.16.0 for stack(s) cflinuxfs3
  * Add rubygems 3.3.24, remove rubygems 3.3.22 for stack(s) cflinuxfs3
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | bundler | 1.17.3 | cflinuxfs3 |
  | bundler | 2.3.24 | cflinuxfs3 |
  | jruby | 9.2.21.0 | cflinuxfs3 |
  | jruby | 9.3.8.0 | cflinuxfs3 |
  | node | 16.18.0 | cflinuxfs3 |
  | openjdk1.8-latest | 1.8.0 | cflinuxfs3 |
  | ruby | 2.7.5 | cflinuxfs3 |
  | ruby | 2.7.6 | cflinuxfs3 |
  | ruby | 3.0.3 | cflinuxfs3 |
  | ruby | 3.0.4 | cflinuxfs3 |
  | ruby | 3.1.1 | cflinuxfs3 |
  | ruby | 3.1.2 | cflinuxfs3 |
  | rubygems | 3.3.24 | cflinuxfs3 |
  | yarn | 1.22.19 | cflinuxfs3 |
  Default binary versions:
  | name | version |
  |-|-|
  | ruby | 2.7.x |
  * Uncached buildpack SHA256: 30c6e52afd35ea30bc2fdf6a105dda864928bb7e8a68b7b2341e89bc9cb83e3c
          
silk3.14.0
smb-volume3.1.6
v3.1.6
  ## Changes
  * Update vendored package golang-1-linux (#67)
  * Update vendored package golang-1-linux (#70)
  ## Dependencies
  * **bosh-template:** Updated to v2.3.0.
For more information, see [bosh-template](https://github.com/cloudfoundry/bosh). * **smbbroker:** Updated to v`89a0251`.
For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * **smbdriver:** Updated to v`68ff9d8`.
For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests4.8.1
4.8.1
  Create bosh final release 4.8.1
          
4.8.0
  Create bosh final release 4.8.0
          
staticfile-offline-buildpack1.5.35
1.5.35
  * Add nginx 1.23.2, remove nginx 1.23.1 for stack(s) cflinuxfs3
  * Add nginx 1.22.1, remove nginx 1.22.0 for stack(s) cflinuxfs3
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | nginx | 1.22.1 | cflinuxfs3 |
  | nginx | 1.23.2 | cflinuxfs3 |
  Default binary versions:
  | name | version |
  |-|-|
  | nginx | 1.23.x |
  * Uncached buildpack SHA256: db23d06c3be3ac43c9dca5bd988ee1b6097d5896afa5309d684b446430ae65ab
          
1.5.34
  * Update libbuildpack
  Packaged binaries:
  | name | version | cf_stacks |
  |-|-|-|
  | nginx | 1.22.0 | cflinuxfs3 |
  | nginx | 1.23.1 | cflinuxfs3 |
  Default binary versions:
  | name | version |
  |-|-|
  | nginx | 1.23.x |
  * Uncached buildpack SHA256: 89420cdafed63dc8dae495c6fce445fb0c5262ad6d149a90cd0e32aa58d3c408
          
statsd-injector1.11.25
syslog11.8.4
system-metrics-scraper3.2.8
uaa74.5.57
v74.5.57
  ### Dependency bumps
  * [Upgrade Newrelic to version 7.11.0](https://github.com/cloudfoundry/uaa-release/commit/50df349712142ab93b937dd52a5041c58a772f65)
  * Bump rspec-mocks from 3.11.1 to 3.11.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/436
  * Bump rspec from 3.11.0 to 3.12.0 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/437
  * Bump github.com/onsi/gomega from 1.22.1 to 1.23.0 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/438
  * Bump github.com/cloudfoundry/bosh-utils from 0.0.340 to 0.0.341 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/439
  **Full Changelog**: https://github.com/cloudfoundry/uaa-release/compare/v74.5.56...v74.5.57
          
v74.5.56
  ### Dependency bumps
  - Various dependency bumps
  - Replace jaxb implementation library from Sun's to Glassfish's
          
v74.5.55
  ### Fixes
  - Fixes an issue where UAA server might crash (error: `java.io.IOException: Too many open files`) because the hung connections to an external LDAP server are not cleaned up.
  ### Dependency bumps
  - Various dependency bumps
  **Full Changelog**: https://github.com/cloudfoundry/uaa-release/compare/v74.5.54...v74.5.55
          
v74.5.54
  ### Dependency bumps
  - Bump Tomcat to version 9.0.68
          

v2.12.18

Release Date: 10/19/2022

  • [Feature] Allow operators to specify isolation segments that should be routable through TAS routers
  • [Known Issue] java-offline-buildpack v4.52 makes TAS for VMs incompatible with some service tiles and prevents apps that use java-offline-buildpack v4.52 from binding to service instances. For more information, see java-offline-buildpack v4.52 Disallows Spring Auto Reconfiguration by Default below.
  • [Bug Fix] Fixes UAA’s compatibility with Amazon Aurora MySQL
  • [Bug Fix] Fix Capi compatibility with MySQL 8
  • Bump binary-offline-buildpack to version 1.0.46
  • Bump capi to version 1.117.9
  • Bump cf-cli to version 1.41.0
  • Bump cf-networking to version 3.13.0
  • Bump cflinuxfs3 to version 0.328.0
  • Bump credhub to version 2.12.10
  • Bump diego to version 2.69.0
  • Bump dotnet-core-offline-buildpack to version 2.4.1
  • Bump garden-runc to version 1.22.4
  • Bump go-offline-buildpack to version 1.9.50
  • Bump java-offline-buildpack to version 4.52
  • Bump log-cache to version 2.12.1
  • Bump loggregator-agent to version 6.5.1
  • Bump mapfs to version 1.2.11
  • Bump metrics-discovery to version 3.2.1
  • Bump mysql-monitoring to version 9.22.0
  • Bump nfs-volume to version 7.1.3
  • Bump nginx-offline-buildpack to version 1.1.43
  • Bump php-offline-buildpack to version 4.4.66
  • Bump push-usage-service-release to version 674.0.25
  • Bump pxc to version 0.46.0
  • Bump python-offline-buildpack to version 1.8.0
  • Bump r-offline-buildpack to version 1.1.33
  • Bump routing to version 0.242.0
  • Bump ruby-offline-buildpack to version 1.8.58
  • Bump silk to version 3.14.0
  • Bump smb-volume to version 3.1.5
  • Bump smoke-tests to version 4.7.0
  • Bump statsd-injector to version 1.11.23
  • Bump syslog to version 11.8.3
  • Bump uaa to version 74.5.53
Component Version Release Notes
ubuntu-xenial stemcell621.296
backup-and-restore-sdk1.18.50
binary-offline-buildpack1.0.46
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.24
bpm1.1.19
capi1.117.9
cf-autoscaling249.0.17
cf-cli1.41.0
v1.41.0
  ### This release contains the following versions of the CF CLI
  | Major version  | Prior version | Current version |
  | ------------- | ------------- | ------------- |
  | **v8** | **8.4.0** | [8.5.0](https://github.com/cloudfoundry/cli/releases/tag/v8.5.0) |
  | **v7**  | **7.5.0** | [7.5.0](https://github.com/cloudfoundry/cli/releases/tag/v7.5.0) |
  | **v6**  | **6.53.0**  | **[6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)** |
          
v1.39.0
  ### This release contains the following versions of the CF CLI
  | Major version  | Prior version | Current version |
  | ------------- | ------------- | ------------- |
  | **v8** | **8.3.0** | [8.4.0](https://github.com/cloudfoundry/cli/releases/tag/v8.4.0) |
  |  **v7**  | **7.4.0** | [7.5.0](https://github.com/cloudfoundry/cli/releases/tag/v7.5.0) |
  | **v6**  | **6.53.0**  | **[6.53.0](https://github.com/cloudfoundry/cli/releases/tag/v6.53.0)** |
          
cf-networking3.13.0
cflinuxfs30.328.0
credhub2.12.10
2.12.10
  ### Security Fixes
  - Bump various dependencies
  - Bump Spring Boot from 2.7.3 to 2.7.4
          
2.12.9
  ### Security Fixes
  - Bump various dependencies
  ### Enhancements
  - Improve Find a Credential by Name-Like query performance
          
diego2.69.0
dotnet-core-offline-buildpack2.4.1
garden-runc1.22.4
go-offline-buildpack1.9.50
haproxy11.10.2
java-offline-buildpack4.52
log-cache2.12.1
loggregator106.6.9
loggregator-agent6.5.1
mapfs1.2.11
v1.2.11
  ## Changes
  * Update vendored package golang-1-linux (#21)
          
v1.2.8
  ## What's Changed
  * Bump src/mapfs to `0ee84aa` #18
          
v1.2.7
  - [Bumps mapfs submodule to master@1600494](https://github.com/cloudfoundry/mapfs/commit/160049400a47577b0f3a8b2948974bc38ce76f18)
  - [Bump golang from 1.13 to 1.17](https://github.com/cloudfoundry/mapfs-release/commit/c287adda5cbdf345ff1b4985ae93cb72f1618f95)
          
metric-registrar1.2.10
metrics-discovery3.2.1
mysql-monitoring9.22.0
9.22.0
  Final release 9.22.0
  - Build w/ go 1.19.2
          
v9.21.0
  - Build with Go 1.19.1
          
v9.19.0
  **New Features**
  The `mysql-metrics` job now supports a `mysql-metrics.port` option to specify the MySQL port when scraping database metrics. This port defaults to 3306 but may be configured to a non-standard port.
          
nats42
nfs-volume7.1.3
nginx-offline-buildpack1.1.43
nodejs-offline-buildpack1.7.73
notifications62
notifications-ui40
php-offline-buildpack4.4.66
push-apps-manager-release675.0.5
push-usage-service-release674.0.25
v674.0.25
  ## Changes
  * Bump src/app-usage-service from [`99b5b7a`](https://github.com/pivotal-cf/app-usage-service/commit/99b5b7aa4e32a14293418f5b5237e54ec74ee07d) to [`aad81af`](https://github.com/pivotal-cf/app-usage-service/commit/aad81af5ada02ff2795e5ac69bba94e7591752ab)
  * Remove dependabot configs for legacy support branches (https://github.com/pivotal-cf/usage-service-release/pull/252)
          
pxc0.46.0
python-offline-buildpack1.8.0
r-offline-buildpack1.1.33
routing0.242.0
v0.242.0
  ## What's Changed
  -  `tcp_router` is now more verbose when running `haproxy_reloader` to assist in diagnosting failed reloads. Thanks @geofffranks! 🎉 ([PR 9](https://github.com/cloudfoundry/cf-tcp-router/pull/9))
  - `gorouter` will now truncate access logs that exceed loggregator + UDP packet limits, so that we no longer drop access log messages sent to the firehose. Thanks @ameowlia @ebroberson! 😻 ([PR 328](https://github.com/cloudfoundry/gorouter/pull/328) and [PR 329](https://github.com/cloudfoundry/gorouter/pull/329))
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.241.0...v0.242.0
  ## ✨  Built with go 1.19.1
          
v0.241.0
  🎉 Bumped to go1.19.1
  * @plowin submitted [gorouter PR 327](https://github.com/cloudfoundry/gorouter/pull/327) to adjust endpoint-not-unregistered log-level to 'info'
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.240.0...v0.241.0
          
v0.240.0
  ## What's Changed
  * @geofffranks and @ameowlia added property `router.max_header_bytes` to the gorouter job.
  * This value controls the maximum number of bytes the gorouter will read parsing the request header's keys and values, including the request line.
  * It does not limit the size of the request body.
  * An additional padding of 4096 bytes is added to this value by go.
  * Requests with larger headers will result in a 431 status code.
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.239.0...v0.240.0
  ## Manifest Property Changes
  | Job | Property | 0.237.0 | 0.238.0 |
  | --- | --- | --- | --- |
  | `gorouter` | `router.max_header_bytes` | didn't exist | 1048576 (1MB) |
  ## ✨  Built with go 1.18.6
          
v0.239.0
  ## What's Changed
  - Bumped Golang to 1.18.6 to mitigate [CVE-2022-27664](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27664)
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.238.0...v0.239.0
  ## ✨  Built with go 1.18.6
          
v0.238.0
  ## What's Changed
  - Gorouter once again supports hairpinning for route-service requests, for more information, see [the proposed update.](https://github.com/cloudfoundry/routing-release/issues/281) `router.route_services_internal_lookup_allowlist` can be used to control which domains of route services can be hairpinned. Thanks @peanball!!
  - Gorouter has a new websocket-specific dial timeout (`websocket_dial_timeout`), configurable separately from the default endpoint dial timeout. Thanks @peanball  for this one too!!
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.237.0...v0.238.0
  ## Manifest Property Changes
  | Job | Property | 0.237.0 | 0.238.0 |
  | --- | --- | --- | --- |
  | `gorouter` | `websocket_dial_timeout_in_seconds` | didn't exist | Defaults to `endpoint_dial_timeout_in_seconds`'s value |
  | `gorouter` | `router.route_services_internal_lookup_allowlist` | didn't exist | No internal lookups allowed for route services. |
  ## ✨  Built with go 1.18.5
          
v0.237.0
  ## What's Changed
  - ⚠️ Bump to golang 1.18 🎉
  **Breaking Changes:** The routing components are now more strict about the protocols used in TLS communications, causing integrations with systems using older, insecure protocols to fail. These components have been updated to Go 1.18, and will no longer support TLS 1.0 and 1.1 connections or certificates with a SHA-1 checksum. This is most likely to affect connections with external databases.
  Please see this golang 1.18 release notes [section](https://tip.golang.org/doc/go1.18#tls10) for more information about the golang 1.18 change.
  ###
  * Update uaa-go-client; by @joergdw in https://github.com/cloudfoundry/routing-release/pull/277
  * updated spec files to match packages by @ebroberson in https://github.com/cloudfoundry/routing-release/pull/282
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.236.0...v0.237.0
  ## New Contributors
  * @joergdw made their first contribution in https://github.com/cloudfoundry/routing-release/pull/277
  * @ebroberson made their first contribution in https://github.com/cloudfoundry/routing-release/pull/282
  ## ✨  Built with go 1.18.4
          
ruby-offline-buildpack1.8.58
silk3.14.0
smb-volume3.1.5
v3.1.5
  ## Changes
  * Update vendored package golang-1-linux (#58)
          
v3.1.4
  ## Release Notes
  - Fix issue when multiple cf versions are included  (#55)
  ## Dependencies
  - The `smbbrokerpush` and `bbr-smbbroker` errands require either the `cf-cli-7-linux` or `cf-cli-6-linux` job from [cf-cli-release](https://bosh.io/releases/github.com/bosh-packages/cf-cli-release?all=1) to be colocated on the errand VM.
          
v3.1.3
  ## Release Notes
  - Added support for CF CLI v8 to errands (#45)
  - Fixed Jammy compilation issues (#53)
  ## Dependencies
  - Bump [src/code.cloudfoundry.org/smbbroker](https://github.com/cloudfoundry/smbbroker) (#41, #50)
  - Bump [src/code.cloudfoundry.org/smbdriver](https://github.com/cloudfoundry/smbdriver) (#47, #48, #51)
          
v3.1.2
  ## Release Notes
  - Support Bionic Stemcell #16
  - Add blobs for the `keyutils` package for both `bionic` and `jammy`.
  - We now install this package on any VM that runs the `smbdriver` bosh job iff that VM uses a `bionic` or `jammy` stemcell
  - This should allow the `smbdriver` to reliably mount SMB volumes on those stemcells, as discussed in #16
  ## Dependencies
  - The `smbbrokerpush` and `bbr-smbbroker` errands require either the `cf-cli-7-linux` or `cf-cli-6-linux` job from [cf-cli-release](https://bosh.io/releases/github.com/bosh-packages/cf-cli-release?all=1) to be colocated on the errand VM.
          
v3.1.1
  ## Release Notes
  * Bumps [bosh-template](https://github.com/cloudfoundry/bosh) from 2.2.0 to 2.2.1 (#22)
  * Bumps [rspec-its](https://github.com/rspec/rspec-its) from 1.2.0 to 1.3.0 (#23)
  * Bumps [rspec](https://github.com/rspec/rspec-metagem) to 3.11.0. (#37)
  * Bumps [src/code.cloudfoundry.org/smbdriver](https://github.com/cloudfoundry/smbdriver) to `1e97c5d` (#34)
  * Bumps [src/code.cloudfoundry.org/smbbroker](https://github.com/cloudfoundry/smbbroker) to `64ba567` (#36)
  * Bumps automake from 1.15 to 1.15.1 (#43 - fixes Bionic compilation)
  ## Dependencies
  - The `smbbrokerpush` and `bbr-smbbroker` errands require either the `cf-cli-7-linux` or `cf-cli-6-linux` job from [cf-cli-release](https://bosh.io/releases/github.com/bosh-packages/cf-cli-release?all=1) to be colocated on the errand VM.
          
smoke-tests4.7.0
4.7.0
  Create bosh final release 4.7.0
          
staticfile-offline-buildpack1.5.33
statsd-injector1.11.23
syslog11.8.3
system-metrics-scraper3.2.8
uaa74.5.53
v74.5.53
  ### Dependency bumps
  - Various dependency bumps
          
v74.5.52
  ### Dependency bumps
  - Various dependency bumps, including some dependencies with security fixes.
          
v74.5.49
  ### Features
  - Add `uaa.database.additionalParameters` to set additional parameters in the database connection url. Operators can enable compatibility with Amazon Aurora for MySQL by adding this config:
  ```
  uaa:
  database:
  additionalParameters:
  usePipelineAuth: "false"
  useBatchMultiSend: "false"
  ```
  ### Dependency bumps
  - Various dependency bumps.
          

v2.12.17

Release Date: 09/21/2022

  • [Security Fix] Bump Cloud Controller Ruby version to 2.7.6 and Go to 1.18.5
  • [Security Fix] Update Content-Security-Policy
  • [Feature] Enables TLS for all internal MySQL galera and monitoring components
  • [Feature Improvement] Bump golang to 1.18 for diego, routing, cf-networking, and silk
  • [Feature Improvement] Use the latest version of nats-release
  • Bump backup-and-restore-sdk to version 1.18.50
  • Bump bosh-system-metrics-forwarder to version 0.0.24
  • Bump bpm to version 1.1.19
  • Bump capi to version 1.117.8
  • Bump cflinuxfs3 to version 0.319.0
  • Bump credhub to version 2.12.8
  • Bump dotnet-core-offline-buildpack to version 2.4.0
  • Bump garden-runc to version 1.22.0
  • Bump go-offline-buildpack to version 1.9.49
  • Bump log-cache to version 2.11.13
  • Bump loggregator to version 106.6.9
  • Bump loggregator-agent to version 6.4.4
  • Bump metric-registrar to version 1.2.10
  • Bump metrics-discovery to version 3.1.2
  • Bump mysql-monitoring to version 9.18.0
  • Bump nginx-offline-buildpack to version 1.1.42
  • Bump nodejs-offline-buildpack to version 1.7.73
  • Bump php-offline-buildpack to version 4.4.65
  • Bump push-apps-manager-release to version 675.0.5
  • Bump python-offline-buildpack to version 1.7.57
  • Bump r-offline-buildpack to version 1.1.32
  • Bump ruby-offline-buildpack to version 1.8.57
  • Bump silk to version 3.12.0
  • Bump staticfile-offline-buildpack to version 1.5.33
  • Bump statsd-injector to version 1.11.21
  • Bump syslog to version 11.8.2
  • Bump system-metrics-scraper to version 3.2.8
  • Bump uaa to version 74.5.48
Component Version Release Notes
ubuntu-xenial stemcell621.265
backup-and-restore-sdk1.18.50
v1.18.50
  ## Changes
  * Add final release 1.18.49 [ci skip]
  * Bump mariadb from 10.6.8 to 10.6.9 (#688)
  * Bump mysql from 5.7.37 to 5.7.38 (#674)
  * Bump postgres from 10.21 to 10.22 (#682)
  * Bump postgres from 11.16 to 11.17 (#683)
  * Bump postgres from 13.7 to 13.8 (#684)
  * Fix deploy postres ci job (#687)
  * [ci] Replace Xenial by Jammy (#689)
  ## Dependencies
  * **storage:** Updated to v1.25.0.
For more information, see [storage](https://github.com/googleapis/google-cloud-go). * **bosh-backup-and-restore:** Updated to v1.9.37.
For more information, see [bosh-backup-and-restore](https://github.com/cloudfoundry-incubator/bosh-backup-and-restore). * **api:** Updated to v0.94.0.
For more information, see [api](https://github.com/googleapis/google-api-go-client).
v1.18.49
  ## Changes
  * Add final release 1.18.47 [ci skip]
  ## Dependencies
  * **storage:** Updated to v1.24.0.
For more information, see [storage](https://github.com/googleapis/google-cloud-go). * **bosh-backup-and-restore:** Updated to v1.9.35.
For more information, see [bosh-backup-and-restore](https://github.com/cloudfoundry-incubator/bosh-backup-and-restore). * **gomega:** Updated to v1.20.0.
For more information, see [gomega](https://github.com/onsi/gomega).
v1.18.48
  ## Changes
  * Add final release 1.18.47 [ci skip]
  * Fix bpm-release download url
  * Parametrise minis-host and minio-port
  * Remove explicit port in BOSH_GW_HOST
  * Remove hardcoded port
  * Replace secrets in task definition
  ## Dependencies
  * **storage:** Updated to v1.24.0.
For more information, see [storage](https://github.com/googleapis/google-cloud-go). * **bosh-backup-and-restore:** Updated to v1.9.35.
For more information, see [bosh-backup-and-restore](https://github.com/cloudfoundry-incubator/bosh-backup-and-restore). * **gomega:** Updated to v1.20.0.
For more information, see [gomega](https://github.com/onsi/gomega).
binary-offline-buildpack1.0.45
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.24
bpm1.1.19
capi1.117.8
cf-autoscaling249.0.17
cf-cli1.38.0
cf-networking3.11.0
cflinuxfs30.319.0
credhub2.12.8
2.12.8
  ### Security Fixes
  - Bump various dependencies, including bumping postgresql from 42.4.0 to 42.4.1, which addresses [CVE-2022-31197](https://nvd.nist.gov/vuln/detail/CVE-2022-31197)
          
2.12.7
  ### Security Fixes
  - Bump various dependencies
  ### Bug Fixes
  - Improved test robustness on platforms with slow random number generation
  - Improved test robustness for several tests that handle database setup
          
diego2.62.0
dotnet-core-offline-buildpack2.4.0
garden-runc1.22.0
go-offline-buildpack1.9.49
haproxy11.10.2
java-offline-buildpack4.50
log-cache2.11.13
loggregator106.6.9
loggregator-agent6.4.4
mapfs1.2.6
metric-registrar1.2.10
metrics-discovery3.1.2
mysql-monitoring9.18.0
v9.18.0
  **Bugs Fixed**
  Fixed a bug where mysql-metrics would fail to restart under ubuntu-jammy stemcells
  As part of this fix, mysql-metrics and the mysql-diag-agent jobs now use bpm for process management.
          
v9.17.0
  - `mysql-diag-agent` and `replication-canary` support TLS
          
v9.16.0
  - Bump golang to version 1.18.2
          
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.42
nodejs-offline-buildpack1.7.73
notifications62
notifications-ui40
php-offline-buildpack4.4.65
push-apps-manager-release675.0.5
675.0.5
  - Update Content-Security-Policy
          
push-usage-service-release674.0.24
pxc0.44.0
python-offline-buildpack1.7.57
r-offline-buildpack1.1.32
routing0.236.0
ruby-offline-buildpack1.8.57
silk3.12.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.33
statsd-injector1.11.21
syslog11.8.2
system-metrics-scraper3.2.8
uaa74.5.48
v74.5.48
  ### Dependency bumps
  - Various dependency bumps.
          
v74.5.47
  ### Fixes
  - Fixes a sporadic pre-start script failure due to a race condition of the `update-ca-certificates` commands [#391]
  ### Dependency bumps
  - Various dependency bumps.
          

v2.12.16

Release Date: 08/10/2022

  • Bump backup-and-restore-sdk to version 1.18.47
  • Bump bosh-system-metrics-forwarder to version 0.0.23
  • Bump cf-autoscaling to version 249.0.17
  • Bump cf-networking to version 3.11.0
  • Bump cflinuxfs3 to version 0.312.0
  • Bump credhub to version 2.12.6
  • Bump dotnet-core-offline-buildpack to version 2.3.44
  • Bump go-offline-buildpack to version 1.9.48
  • Bump haproxy to version 11.10.2
  • Bump java-offline-buildpack to version 4.50
  • Bump log-cache to version 2.11.12
  • Bump loggregator to version 106.6.8
  • Bump loggregator-agent to version 6.4.3
  • Bump metric-registrar to version 1.2.9
  • Bump metrics-discovery to version 3.1.1
  • Bump nginx-offline-buildpack to version 1.1.41
  • Bump nodejs-offline-buildpack to version 1.7.72
  • Bump php-offline-buildpack to version 4.4.64
  • Bump pxc to version 0.44.0
  • Bump python-offline-buildpack to version 1.7.56
  • Bump r-offline-buildpack to version 1.1.31
  • Bump routing to version 0.236.0
  • Bump ruby-offline-buildpack to version 1.8.56
  • Bump silk to version 3.11.0
  • Bump staticfile-offline-buildpack to version 1.5.32
  • Bump statsd-injector to version 1.11.20
  • Bump syslog to version 11.8.1
  • Bump system-metrics-scraper to version 3.2.7
  • Bump uaa to version 74.5.46
Component Version Release Notes
ubuntu-xenial stemcell621.261
backup-and-restore-sdk1.18.47
binary-offline-buildpack1.0.45
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.23
bpm1.1.18
capi1.117.7
cf-autoscaling249.0.17
cf-cli1.38.0
cf-networking3.11.0
cflinuxfs30.312.0
credhub2.12.6
2.12.6
  ### Security Fixes
  - Bump various dependencies
          
diego2.62.0
dotnet-core-offline-buildpack2.3.44
garden-runc1.20.8
go-offline-buildpack1.9.48
haproxy11.10.2
java-offline-buildpack4.50
log-cache2.11.12
loggregator106.6.8
loggregator-agent6.4.3
mapfs1.2.6
metric-registrar1.2.9
metrics-discovery3.1.1
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.41
nodejs-offline-buildpack1.7.72
notifications62
notifications-ui40
php-offline-buildpack4.4.64
push-apps-manager-release675.0.4
push-usage-service-release674.0.24
pxc0.44.0
python-offline-buildpack1.7.56
r-offline-buildpack1.1.31
routing0.236.0
v0.236.0
  ## What's Changed
  * Gorouter restart script waits for the gorouter to be running before reloading monit
  ## ✨  Built with go 1.17.12
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.235.0...0.236.0
          
0.235.0
  ## What's Changed
  * Gorouter healthchecker retries connection instead of monit (https://github.com/cloudfoundry/routing-release/pull/275)
  ## ✨  Built with go 1.17.11
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.234.0...0.235.0
          
0.234.0
  ## What's Changed
  * Gorouter: the metrics package now uses `lsof` to monitor file descriptors on MacOS @domdom82 https://github.com/cloudfoundry/gorouter/pull/312
  * 🐛 Bumped the `lager` dependency to resolve issues where the timeFormat flag was not honored, resulting in epoch timestamps vs human readable. Thanks @ameowlia!
  * Now tested with the bionic stemcell in CI
  ## ✨  Built with go 1.17.11
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.233.0...0.234.0
          
0.233.0
  ## What's Changed
  * TCP Router: Add locking to the haproxy_reloader script to avoid haproxy reload/restart race conditions by @geofffranks in https://github.com/cloudfoundry/routing-release/pull/269
  * TCP Router: Bump HAProxy from 1.8.13 to 2.5.4 by @cunnie in https://github.com/cloudfoundry/routing-release/pull/266
  * Gorouter: fix proxy round tripper race condition by @ameowlia and @geofffranks  in https://github.com/cloudfoundry/gorouter/pull/318
  * Routing API: fix timestamp precision issue that caused routes to be pruned unexpectedly by @geofffranks in https://github.com/cloudfoundry/routing-api/pull/24
  *  Routing API: remove `golang.x509ignoreCN` bosh property by @geofffranks and @mariash
  * Routing API: fix bug that caused TCP Router's HAProxy to reload every minute by @jrussett in https://github.com/cloudfoundry/routing-api/pull/26.
  ## Manifest Property Changes
  | Job | Property  | Notes |
  | --- | --- | --- |
  | `routing-api` | `golang.x509ignoreCN` | This property exposed a go debug flag for go version 1.15. Since go 1.16 this go debug flag has had no affect. Removing this bosh property is part of our effort to keep our code base free of cruft. |
  ## ✨  Built with go 1.17.10
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.232.0...0.233.0
          
ruby-offline-buildpack1.8.56
silk3.11.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.32
statsd-injector1.11.20
syslog11.8.1
system-metrics-scraper3.2.7
uaa74.5.46

v2.12.15

Release Date: 07/19/2022

  • [Security Fix] Update Content-Security-Policy
  • [Feature] Enable telemetry for iptables rules on Diego cells
  • [Feature] User has the ability to manage step up scaling app instances using Apps Manager
  • [Feature Improvement] Deprecate Spring Cloud Connectors & Spring Auto Configuration support in Java Buildpack.
  • [Bug Fix] Add health check script for Bosh DNS for Cloud Controller
  • [Bug Fix] Fix dummy routes showing in the User Interface
  • [Bug Fix] Fix role assignment when users are created through the CLI
  • [Bug Fix] Fix share domain with organization screen from erroring out
  • [Bug Fix] Resolves an issue with HAProxy log rotation creating null bytes and not freeing disk space after rotation
  • [Bug Fix] Use Content-Disposition header as heapdump filename
  • [Bug Fix] When Autoscaler is configured to use the RabbitMQ Queue Depth scaling metric in an autoscaling rule, you can specify a RabbitMQ service instance. If you specify a service instance, Autoscaler only requests metrics from that service instance.
  • [Bug Fix] Autoscaler migration correctly handles manually-created service bindings index.
  • [Bug Fix] Fixes Autoscaler edge case when using http_throughput rules with scaling factor larger than 1.
  • Bump backup-and-restore-sdk to version 1.18.43
  • Bump cf-autoscaling to version 249.0.13
  • Bump cf-cli to version 1.38.0
  • Bump cf-networking to version 3.9.0
  • Bump cflinuxfs3 to version 0.306.0
  • Bump credhub to version 2.12.5
  • Bump diego to version 2.62.0
  • Bump garden-runc to version 1.20.8
  • Bump go-offline-buildpack to version 1.9.47
  • Bump java-offline-buildpack to version 4.49
  • Bump metrics-discovery to version 3.1.0
  • Bump nginx-offline-buildpack to version 1.1.39
  • Bump nodejs-offline-buildpack to version 1.7.71
  • Bump push-apps-manager-release to version 675.0.4
  • Bump pxc to version 0.43.0
  • Bump silk to version 3.9.0
  • Bump uaa to version 74.5.44
Component Version Release Notes
ubuntu-xenial stemcell621.252
backup-and-restore-sdk1.18.43
binary-offline-buildpack1.0.45
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.22
bpm1.1.18
capi1.117.7
cf-autoscaling249.0.13
cf-cli1.38.0
cf-networking3.9.0
cflinuxfs30.306.0
credhub2.12.5
2.12.5
  ### Security Fixes
  - Bump various dependencies
  ### Bug Fixes
  - Fix for URL path handling on Windows ([cloudfoundry/credhub issue 266](https://github.com/cloudfoundry/credhub/issues/266))
  ### Features
  - CredHub now logs as info instead of error when a credential isn't found
  - Added support for jammy-based stemcells that have openssl 3 ([pivotal/credhub-release issue 65](https://github.com/pivotal/credhub-release/issues/65))
          
diego2.62.0
dotnet-core-offline-buildpack2.3.42
garden-runc1.20.8
go-offline-buildpack1.9.47
haproxy11.6.0
java-offline-buildpack4.49
log-cache2.11.11
loggregator106.6.7
loggregator-agent6.4.1
mapfs1.2.6
metric-registrar1.2.6
metrics-discovery3.1.0
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.39
nodejs-offline-buildpack1.7.71
notifications62
notifications-ui40
php-offline-buildpack4.4.61
push-apps-manager-release675.0.4
push-usage-service-release674.0.24
pxc0.43.0
python-offline-buildpack1.7.54
r-offline-buildpack1.1.28
routing0.232.0
ruby-offline-buildpack1.8.54
silk3.9.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.30
statsd-injector1.11.19
syslog11.7.10
system-metrics-scraper3.2.5
uaa74.5.44

v2.12.14

Release Date: 06/23/2022

Warning: Upcoming reduction in maintenance and security release coverage
In future patches, no sooner than July 1st 2022, some TAS components will become more strict about the protocols used in TLS communications, causing integrations with systems using older, insecure protocols to fail. Specifically, components that use Go will no longer support TLS 1.0 or 1.1, or certificates using SHA-1. Use supported TLS protocols to avoid breaking changes and continue receiving maintenance and security releases.

  • Bump diego to version 2.62.0
Component Version
ubuntu-xenial stemcell621.244
backup-and-restore-sdk1.18.42
binary-offline-buildpack1.0.45
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.22
bpm1.1.18
capi1.117.7
cf-autoscaling249.0.7
cf-cli1.33.0
cf-networking3.6.0
cflinuxfs30.299.0
credhub2.12.4
diego2.62.0
dotnet-core-offline-buildpack2.3.42
garden-runc1.20.6
go-offline-buildpack1.9.46
haproxy11.6.0
java-offline-buildpack4.48.3
log-cache2.11.11
loggregator106.6.7
loggregator-agent6.4.1
mapfs1.2.6
metric-registrar1.2.6
metrics-discovery3.0.13
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.38
nodejs-offline-buildpack1.7.70
notifications62
notifications-ui40
php-offline-buildpack4.4.61
push-apps-manager-release675.0.3
push-usage-service-release674.0.24
pxc0.42.0
python-offline-buildpack1.7.54
r-offline-buildpack1.1.28
routing0.232.0
ruby-offline-buildpack1.8.54
silk3.6.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.30
statsd-injector1.11.19
syslog11.7.10
system-metrics-scraper3.2.5
uaa74.5.41

v2.12.13

Release Date: 06/09/2022

  • [Security Fix] Added Content-Security-Policy headers in UAA responses
  • [Bug Fix] Fix metric registrar secure scraping with isolation segments
  • [Bug Fix] Sticky sessions no longer break when used with route-services that return HTTP 4xx/5xx responses
  • [Bug Fix/Improvement] Stop emitting debug metrics for agents and log-cache by default. Reduces load on logging system by >=720 metrics per vm per minute
  • [Breaking Change] If you followed the procedure in Autoscale application fails with MySQL Deadlock errors to manually add an index to an Autoscale database, and the index is not dropped before you upgrade to TAS for VMs v2.12.13, upgrading causes an error.
  • Bump backup-and-restore-sdk to version 1.18.42
  • Bump binary-offline-buildpack to version 1.0.45
  • Bump bosh-system-metrics-forwarder to version 0.0.22
  • Bump bpm to version 1.1.18
  • Bump capi to version 1.117.7
  • Bump cf-autoscaling to version 249.0.7
  • Bump cf-networking to version 3.6.0
  • Bump cflinuxfs3 to version 0.299.0
  • Bump diego to version 2.64.0
  • Bump dotnet-core-offline-buildpack to version 2.3.42
  • Bump garden-runc to version 1.20.6
  • Bump go-offline-buildpack to version 1.9.46
  • Bump java-offline-buildpack to version 4.48.3
  • Bump log-cache to version 2.11.11
  • Bump loggregator to version 106.6.7
  • Bump loggregator-agent to version 6.4.1
  • Bump metric-registrar to version 1.2.6
  • Bump metrics-discovery to version 3.0.13
  • Bump nginx-offline-buildpack to version 1.1.38
  • Bump nodejs-offline-buildpack to version 1.7.70
  • Bump php-offline-buildpack to version 4.4.61
  • Bump push-usage-service-release to version 674.0.24
  • Bump python-offline-buildpack to version 1.7.54
  • Bump routing to version 0.232.0
  • Bump ruby-offline-buildpack to version 1.8.54
  • Bump silk to version 3.6.0
  • Bump staticfile-offline-buildpack to version 1.5.30
  • Bump statsd-injector to version 1.11.19
  • Bump syslog to version 11.7.10
  • Bump system-metrics-scraper to version 3.2.5
  • Bump uaa to version 74.5.41
Component Version Release Notes
ubuntu-xenial stemcell621.244
backup-and-restore-sdk1.18.42
binary-offline-buildpack1.0.45
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.22
bpm1.1.18
capi1.117.7
cf-autoscaling249.0.7
cf-cli1.33.0
cf-networking3.6.0
cflinuxfs30.299.0
credhub2.12.4
diego2.64.0
dotnet-core-offline-buildpack2.3.42
garden-runc1.20.6
go-offline-buildpack1.9.46
haproxy11.6.0
java-offline-buildpack4.48.3
log-cache2.11.11
loggregator106.6.7
loggregator-agent6.4.1
mapfs1.2.6
metric-registrar1.2.6
metrics-discovery3.0.13
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.38
nodejs-offline-buildpack1.7.70
notifications62
notifications-ui40
php-offline-buildpack4.4.61
push-apps-manager-release675.0.3
push-usage-service-release674.0.24
pxc0.42.0
python-offline-buildpack1.7.54
r-offline-buildpack1.1.28
routing0.232.0
0.232.0
  ## What's Changed
  * Fixing issue #250: Return a 503 not a 404 when all instances down by @kecirlotfi in https://github.com/cloudfoundry/routing-release/pull/268 and https://github.com/cloudfoundry/gorouter/pull/314
  * Fixing issue https://github.com/cloudfoundry/gorouter/pull/315: Fix route service pruning by @geofffranks
  ## Manifest Property Changes
  | Job | Property | default | notes |
  | --- | --- | --- | --- |
  | `gorouter` | `for_backwards_compatibility_only.empty_pool_response_code_503` | `0s` | This property was added to enable https://github.com/cloudfoundry/routing-release/pull/268 |
  ## New Contributors 🎉
  * @kecirlotfi made their first contribution! Thanks so much!
  ## ✨  Built with go 1.17.9
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.231.0...0.232.0
          
ruby-offline-buildpack1.8.54
silk3.6.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.30
statsd-injector1.11.19
syslog11.7.10
system-metrics-scraper3.2.5
uaa74.5.41

v2.12.12

Release Date: 04/20/2022

  • [Feature Improvement] Add option to configure CC BBR health check timeout
  • [Feature Improvement] Enforce service name uniqueness in shared services in spaces
  • [Breaking Change] Syslog drains configured to use TLS now reject certificates signed with the SHA-1 hash function.
  • Bump backup-and-restore-sdk to version 1.18.39
  • Bump binary-offline-buildpack to version 1.0.43
  • Bump capi to version 1.117.6
  • Bump cf-autoscaling to version 249.0.2
  • Bump cflinuxfs3 to version 0.285.0
  • Bump credhub to version 2.12.4
  • Bump diego to version 2.62.0
  • Bump dotnet-core-offline-buildpack to version 2.3.41
  • Bump go-offline-buildpack to version 1.9.42
  • Bump java-offline-buildpack to version 4.48.2
  • Bump log-cache to version 2.11.8
  • Bump loggregator to version 106.6.4
  • Bump loggregator-agent to version 6.3.11
  • Bump metrics-discovery to version 3.0.10
  • Bump nginx-offline-buildpack to version 1.1.37
  • Bump nodejs-offline-buildpack to version 1.7.69
  • Bump php-offline-buildpack to version 4.4.59
  • Bump pxc to version 0.42.0
  • Bump python-offline-buildpack to version 1.7.53
  • Bump r-offline-buildpack to version 1.1.28
  • Bump ruby-offline-buildpack to version 1.8.53
  • Bump uaa to version 74.5.37
Component Version Release Notes
ubuntu-xenial stemcell621.224
backup-and-restore-sdk1.18.39
binary-offline-buildpack1.0.43
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.21
bpm1.1.16
capi1.117.6
cf-autoscaling249.0.2
v249.0.2
  ## What's Changed
  * Bump github.com/onsi/gomega from 1.18.1 to 1.19.0 in /src by @dependabot in https://github.com/pivotal-cf/cf-autoscaling-release/pull/640
  * bump spring boot for cve CVE-2022-22965 by @Benjamintf1 in https://github.com/pivotal-cf/cf-autoscaling-release/pull/646
  * Bump log4j-to-slf4j from 2.17.1 to 2.17.2 in /src/cf-autoscaling/api by @dependabot in https://github.com/pivotal-cf/cf-autoscaling-release/pull/619
  * Bump log4j-api from 2.17.1 to 2.17.2 in /src/cf-autoscaling/api by @dependabot in https://github.com/pivotal-cf/cf-autoscaling-release/pull/618
  * Bump gson from 2.8.6 to 2.9.0 in /src/cf-autoscaling/api by @dependabot in https://github.com/pivotal-cf/cf-autoscaling-release/pull/611
  * Bump spock-core from 2.0-groovy-3.0 to 2.1-groovy-3.0 in /src/cf-autoscaling/api by @dependabot in https://github.com/pivotal-cf/cf-autoscaling-release/pull/613
  * Bump objenesis from 3.1 to 3.2 in /src/cf-autoscaling/api by @dependabot in https://github.com/pivotal-cf/cf-autoscaling-release/pull/479
  **Full Changelog**: https://github.com/pivotal-cf/cf-autoscaling-release/compare/v249.0.1...v249.0.2
          
v249.0.1
  ## What's Changed
  * Pin jackson-databind to 2.13.2.2 to address [CVE-2020-36518](https://nvd.nist.gov/vuln/detail/CVE-2020-36518)
  * Unpin tomcat dependencies in autoscale API in https://github.com/pivotal-cf/cf-autoscaling-release/pull/636
  * Bump autoscale API dependencies in https://github.com/pivotal-cf/cf-autoscaling-release/pull/612, https://github.com/pivotal-cf/cf-autoscaling-release/pull/625, https://github.com/pivotal-cf/cf-autoscaling-release/pull/525, https://github.com/pivotal-cf/cf-autoscaling-release/pull/634
  **Full Changelog**: https://github.com/pivotal-cf/cf-autoscaling-release/compare/v249...v249.0.1
          
cf-cli1.33.0
cf-networking3.3.0
cflinuxfs30.285.0
credhub2.12.4
2.12.4
  ### Security Fixes
  - Bump various dependencies.
          
2.12.3
  ### Security Fixes
  - Bump various dependencies.
          
diego2.62.0
dotnet-core-offline-buildpack2.3.41
garden-runc1.20.3
go-offline-buildpack1.9.42
haproxy11.6.0
java-offline-buildpack4.48.2
log-cache2.11.8
v2.11.8
  ## Release Highlights
  Pin Go back to go1.17.
  [Go 1.18 includes changes to memory management](https://tip.golang.org/doc/go1.18#runtime) and we'd like to get more familiarity with these changes and their impact before bumping.
  ### ✨ Built with golang 1.17.8
          
v2.11.7
  - fix bug with large messages (#58)
  - bump-golang to v0.100.0(now 1.18)
          
v2.11.6
  * fix prom scraper config (#55)
  * bump-golang to v0.99.0
  * Remove useless GODEBUG flag `x509ignoreCN`
          
loggregator106.6.4
v106.6.4
  - fix bug with large messages (#430)
  - bump-golang to v0.100.0(now 1.18)
          
loggregator-agent6.3.11
v6.3.11
  - fix bug with large messages (#89)
  - bump-golang to v0.100.0(now 1.18)
          
mapfs1.2.6
metric-registrar1.2.5
metrics-discovery3.0.10
v3.0.10
  - fix bug with large messages (#22)
  - bump-golang to v0.100.0(now 1.18)
          
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.37
nodejs-offline-buildpack1.7.69
notifications62
notifications-ui40
php-offline-buildpack4.4.59
push-apps-manager-release675.0.3
push-usage-service-release674.0.23
pxc0.42.0
python-offline-buildpack1.7.53
r-offline-buildpack1.1.28
routing0.231.0
ruby-offline-buildpack1.8.53
silk3.3.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.29
statsd-injector1.11.18
syslog11.7.7
system-metrics-scraper3.2.4
uaa74.5.37

v2.12.11

Release Date: 04/06/2022

  • [Security Fix] This release fixes CVE-2022-22965; note that the “fix” in the immediately prior version did not actually address the vulnerability, as Spring framework dependencies in UAA that should have been updated, were not. We have confirmed this version actually contains the dependency bumps, and that it is no longer vulnerable to our confirmed exploit. We consider this patch necessary for secure operation; see the VMware Security Advisory here for more details. This release also includes a new version of the Java Buildpack.
  • Bump java-offline-buildpack to version 4.48.2
  • Bump uaa to version 74.5.37
Component Version
ubuntu-xenial stemcell621.224
backup-and-restore-sdk1.18.34
binary-offline-buildpack1.0.42
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.21
bpm1.1.16
capi1.117.4
cf-autoscaling249
cf-cli1.33.0
cf-networking3.3.0
cflinuxfs30.279.0
credhub2.12.1
diego2.61.0
dotnet-core-offline-buildpack2.3.40
garden-runc1.20.3
go-offline-buildpack1.9.41
haproxy11.6.0
java-offline-buildpack4.48.2
log-cache2.11.5
loggregator106.6.3
loggregator-agent6.3.10
mapfs1.2.6
metric-registrar1.2.5
metrics-discovery3.0.9
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.36
nodejs-offline-buildpack1.7.67
notifications62
notifications-ui40
php-offline-buildpack4.4.57
push-apps-manager-release675.0.3
push-usage-service-release674.0.23
pxc0.41.0
python-offline-buildpack1.7.51
r-offline-buildpack1.1.27
routing0.231.0
ruby-offline-buildpack1.8.52
silk3.3.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.29
statsd-injector1.11.18
syslog11.7.7
system-metrics-scraper3.2.4
uaa74.5.37

v2.12.10

Release Date: 03/31/2022

  • [Security Fix] This release was intended to address CVE-2022-22965, but did not actually update the vulnerable dependencies. Upgrade to a more recent patch version instead. See the VMware Security Advisory here for more details.
  • Bump uaa to version 74.5.36
Component Version
ubuntu-xenial stemcell621.224
backup-and-restore-sdk1.18.34
binary-offline-buildpack1.0.42
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.21
bpm1.1.16
capi1.117.4
cf-autoscaling249
cf-cli1.33.0
cf-networking3.3.0
cflinuxfs30.279.0
credhub2.12.1
diego2.61.0
dotnet-core-offline-buildpack2.3.40
garden-runc1.20.3
go-offline-buildpack1.9.41
haproxy11.6.0
java-offline-buildpack4.48
log-cache2.11.5
loggregator106.6.3
loggregator-agent6.3.10
mapfs1.2.6
metric-registrar1.2.5
metrics-discovery3.0.9
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.36
nodejs-offline-buildpack1.7.67
notifications62
notifications-ui40
php-offline-buildpack4.4.57
push-apps-manager-release675.0.3
push-usage-service-release674.0.23
pxc0.41.0
python-offline-buildpack1.7.51
r-offline-buildpack1.1.27
routing0.231.0
ruby-offline-buildpack1.8.52
silk3.3.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.29
statsd-injector1.11.18
syslog11.7.7
system-metrics-scraper3.2.4
uaa74.5.36

v2.12.9

Release Date: 03/31/2022

  • [Security Fix] This release fixes CVE-2022-23806 and CVE-2022-23772.
  • [Bug Fix] Assign cloud_controller.read and cloud_controller.write scopes to service brokers created using CF CLI v8
  • [Bug Fix] CAPI: Quota metrics are no longer filtered when syslog ingress is turned on
  • [Bug Fix] Propagate updated user provided service environment variables to bound applications for CF CLI v8
  • [Bug Fix] Resolve an issue resulting in tcp-router repeatedly respawning haproxy until it hits a forked process limit
  • [Bug Fix] Resolves an issue where invalid seeded router group values should caused breaking changes
  • [Bug fix] Remove x509ignoreCN option in Gorouter
  • Bump capi to version 1.117.4
  • Bump cf-autoscaling to version 249
  • Bump cf-networking to version 3.3.0
  • Bump cflinuxfs3 to version 0.279.0
  • Bump credhub to version 2.12.1
  • Bump diego to version 2.61.0
  • Bump dotnet-core-offline-buildpack to version 2.3.40
  • Bump garden-runc to version 1.20.3
  • Bump go-offline-buildpack to version 1.9.41
  • Bump loggregator to version 106.6.3
  • Bump loggregator-agent to version 6.3.10
  • Bump metric-registrar to version 1.2.5
  • Bump metrics-discovery to version 3.0.9
  • Bump nginx-offline-buildpack to version 1.1.36
  • Bump nodejs-offline-buildpack to version 1.7.67
  • Bump php-offline-buildpack to version 4.4.57
  • Bump python-offline-buildpack to version 1.7.51
  • Bump r-offline-buildpack to version 1.1.27
  • Bump routing to version 0.231.0
  • Bump ruby-offline-buildpack to version 1.8.52
  • Bump silk to version 3.3.0
  • Bump staticfile-offline-buildpack to version 1.5.29
  • Bump uaa to version 74.5.35
Component Version Release Notes
ubuntu-xenial stemcell621.224
backup-and-restore-sdk1.18.34
binary-offline-buildpack1.0.42
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.21
bpm1.1.16
capi1.117.4
cf-autoscaling249
cf-cli (v7/v8)*1.33.0
cf-networking3.3.0
cflinuxfs30.279.0
credhub2.12.1
2.12.1
  ### Security Fixes
  - Bump various dependencies.
          
2.12.0
  ### Security Fixes
  - Bump various dependencies.
  ### Bug Fixes
  - Fixes an issue where CredHub experiences downtime during certificate rotation process by making CredHub properly load concatenated mTLS CA certificates.
  ### Features
  - CredHub is now compatible with Postgres 13, 14.
          
2.11.1
  ### Dependency Bumps
  - Bumps log4j2 to 2.17.1
          
2.11.0
  ### Security Fixes
  - Further addresses [CVE with Log4j library](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q) and [its prior incomplete fix](https://github.com/advisories/GHSA-7rjr-3q55-vv33) by bumping to log4j2 2.16.0.
          
2.10.0
  ### Security Fixes
  - Addresses [CVE with Log4j library](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)
  ### Features
  - Adds a minimum duration server-level configuration fields for leaf and CA certificates: `certificates.leaf_minimum_duration_in_days` and `certificates.ca_minimum_duration_in_days`. When these fields are configured, if a request to generate or regenerate a certificate has a duration lower than the minimum, then the minimum duration is used instead. (https://github.com/cloudfoundry/credhub/pull/201)
          
diego2.61.0
dotnet-core-offline-buildpack2.3.40
garden-runc1.20.3
go-offline-buildpack1.9.41
haproxy11.6.0
java-offline-buildpack4.48
log-cache2.11.5
loggregator106.6.3
loggregator-agent6.3.10
mapfs1.2.6
metric-registrar1.2.5
metrics-discovery3.0.9
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.36
nodejs-offline-buildpack1.7.67
notifications62
notifications-ui40
php-offline-buildpack4.4.57
push-apps-manager-release675.0.3
push-usage-service-release674.0.23
pxc0.41.0
python-offline-buildpack1.7.51
r-offline-buildpack1.1.27
routing0.231.0
0.231.0
  ## Bug Fixes
  - Removed the x509ignoreCN property. Now that `gorouter` is built on golang 1.17, it
no longer has any effect on gorouter behavior, and was only adding to confusion in
the properties
  - Resolve an issue with route-registrar using the same TTL as it's RegistrationInterval
for tcp routes, leading to unnecessary churn of pruned + re-registered routes.
  - Resolve an issue with Routing API where upserts to tcp routes were causing change
events to be emitted when the only change was a bump in TTL. This led to an issue
where tcp-router was constantly reloading haproxy with every route's heartbeat
registration call.
  ## Manifest Property Changes
  | Job | Property | 0.230.0 | 0.231.0 |
  | --- | --- | --- | --- |
  | `gorouter` | `golang.x509ignoreCN` | false | No longer exists |
  |  `route_registrar` | `golang.x509ignoreCN` | false | No longer exists |
  | `tcp_router` | `golang.x509ignoreCN` | false | No longer exists |
  ### ✨ Built with golang 1.17.8
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.230.0...0.231.0
          
0.230.0
  ## Feature
  * update gorouter for prometheus scraping by @Benjamintf1 in https://github.com/cloudfoundry/routing-release/pull/258
  ## Bug Fix
  * Invalid seeded router group manifest values should no longer cause breaking changes by default by @ameowlia in https://github.com/cloudfoundry/routing-release/pull/261
  ### ✨ Built with golang 1.17.7
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/0.229.0...0.230.0
          
ruby-offline-buildpack1.8.52
silk3.3.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.29
statsd-injector1.11.18
syslog11.7.7
system-metrics-scraper3.2.4
uaa74.5.35

v2.12.8

Release Date: 02/28/2022

  • [Feature Improvement] Due to routing-release now being built with Golang 1.17, all certificates provided must contain SAN entries on them. The previous workaround of setting “Enable temporary workaround for certs without SANs” no longer functions.
  • [Feature Improvement] Per Golang 1.17’s new and stricter IP parsing standards, any IP addrs with leading zeros in any octets will result in a BOSH template failure to allow operators to remove the leading zeros and try again (affects properties fed into diego-release, garden-runc-release, winc-release, nats-release, and routing-release),.
  • [Feature Improvement] UAA is compatible with MySQL 8
  • [Feature Improvement] You can configure container-to-container traffic to use TLS. For more information, see Securing Container-to-Container Traffic in Container-to-Container Networking.

    Warning: This feature introduces a migration to the BBS database. Rolling your TAS for VMs deployment back to v2.12.7 or earlier causes database issues.

  • [Bug Fix] Fix default metric registrar blocked tags to include ‘ip’ and remove 'id’
  • [Bug Fix] Fix metric-registrar blocked tags configuration
  • [Bug Fix] Fixes an issue related to the parsing of the X-B3-TraceId and X-B3-SpanId HTTP headers
  • [Bug Fix] Restore missing networking and garden metrics
  • [Bug Fix] Smoke tests support for TLSv1.3 only option
  • Bump backup-and-restore-sdk to version 1.18.34
  • Bump cf-autoscaling to version 248
  • Bump cflinuxfs3 to version 0.274.0
  • Bump credhub to version 2.9.9
  • Bump diego to version 2.58.1
  • Bump garden-runc to version 1.20.0
  • Bump loggregator-agent to version 6.3.8
  • Bump metric-registrar to version 1.2.4
  • Bump metrics-discovery to version 3.0.8
  • Bump nats to version 42
  • Bump routing to version 0.229.0
  • Bump smoke-tests to version 4.5.0
  • Bump uaa to version 74.5.34
Component Version
ubuntu-xenial stemcell621.211
backup-and-restore-sdk1.18.34
binary-offline-buildpack1.0.42
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.21
bpm1.1.16
capi1.117.2
cf-autoscaling248
cf-cli (v7/v8)*1.33.0
cf-networking2.43.0
cflinuxfs30.274.0
credhub2.9.9
diego2.58.1
dotnet-core-offline-buildpack2.3.38
garden-runc1.20.0
go-offline-buildpack1.9.38
haproxy11.6.0
java-offline-buildpack4.48
log-cache2.11.5
loggregator106.6.2
loggregator-agent6.3.8
mapfs1.2.6
metric-registrar1.2.4
metrics-discovery3.0.8
mysql-monitoring9.15.0
nats42
nfs-volume7.1.1
nginx-offline-buildpack1.1.34
nodejs-offline-buildpack1.7.66
notifications62
notifications-ui40
php-offline-buildpack4.4.55
push-apps-manager-release675.0.3
push-usage-service-release674.0.23
pxc0.41.0
python-offline-buildpack1.7.49
r-offline-buildpack1.1.25
routing0.229.0
ruby-offline-buildpack1.8.50
silk2.43.0
smb-volume3.1.0
smoke-tests4.5.0
staticfile-offline-buildpack1.5.28
statsd-injector1.11.18
syslog11.7.7
system-metrics-scraper3.2.4
uaa74.5.34

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.7

Release Date: 02/07/2022

Note: This version of TAS for VMs contains a known issue that can cause application traces to break. See Gorouter Sets an Invalid X-B3-SpanID Header in Known Issues.

  • [Security Fix] Diego - Bump containerd to v1.5.9 to address (CVE-2021-43816)
  • [Security Fix] Bump routing release to v0.228.0 to address (CVE-2021-44716)
  • [Feature] Monit thresholds for the Cloud Controller worker are configurable
  • [Feature] Operators can sort apps by status in Apps Manager
  • [Feature] Apps can be step-scaled up or down in Autoscaler. See About App Autoscaler.
  • [Feature Improvement] Apps Manager supports HTTP/2
  • [Feature Improvement] Operators can assign the Space Supporter role in Apps Manager
  • [Feature Improvement] Golang v1.17 contains stricter IP parsing standards, so IP addresses with leading zeros in any octets cause a BOSH template failure. Operators can remove the leading zeros and try deploying again. This affects properties that feed into cf-networking-release, silk-release, loggregator-agent-release, and syslog-release. Syslog drains and metric registrar endpoints registered using user-provided services might also be affected.
  • [Bug Fix] Adds the ability to parse the cost object in service plan
  • [Bug Fix] Fix race conditions that could cause Autoscaler to crash
  • Bump backup-and-restore-sdk to version 1.18.32
  • Bump binary-offline-buildpack to version 1.0.42
  • Bump bosh-system-metrics-forwarder to version 0.0.21
  • Bump bpm to version 1.1.16
  • Bump cf-autoscaling to version 247
  • Bump cf-networking to version 2.43.0
  • Bump cflinuxfs3 to version 0.272.0
  • Bump diego to version 2.57.0
  • Bump dotnet-core-offline-buildpack to version 2.3.38
  • Bump go-offline-buildpack to version 1.9.38
  • Bump java-offline-buildpack to version 4.48
  • Bump log-cache to version 2.11.5
  • Bump loggregator to version 106.6.2
  • Bump loggregator-agent to version 6.3.7
  • Bump metric-registrar to version 1.2.3
  • Bump metrics-discovery to version 3.0.7
  • Bump nats to version 41
  • Bump nginx-offline-buildpack to version 1.1.34
  • Bump nodejs-offline-buildpack to version 1.7.66
  • Bump php-offline-buildpack to version 4.4.55
  • Bump push-apps-manager-release to version 675.0.3
  • Bump pxc to version 0.41.0
  • Bump python-offline-buildpack to version 1.7.49
  • Bump r-offline-buildpack to version 1.1.25
  • Bump routing to version 0.228.0
  • Bump ruby-offline-buildpack to version 1.8.50
  • Bump silk to version 2.43.0
  • Bump smoke-tests to version 4.4.0
  • Bump staticfile-offline-buildpack to version 1.5.28
  • Bump statsd-injector to version 1.11.18
  • Bump syslog to version 11.7.7
  • Bump system-metrics-scraper to version 3.2.4
  • Bump uaa to version 74.5.31
Component Version
ubuntu-xenial stemcell621.198
backup-and-restore-sdk1.18.32
binary-offline-buildpack1.0.42
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.21
bpm1.1.16
capi1.117.2
cf-autoscaling247
cf-cli (v7/v8)*1.33.0
cf-networking2.43.0
cflinuxfs30.272.0
credhub2.9.8
diego2.57.0
dotnet-core-offline-buildpack2.3.38
garden-runc1.19.30
go-offline-buildpack1.9.38
haproxy11.6.0
java-offline-buildpack4.48
log-cache2.11.5
loggregator106.6.2
loggregator-agent6.3.7
mapfs1.2.6
metric-registrar1.2.3
metrics-discovery3.0.7
mysql-monitoring9.15.0
nats41
nfs-volume7.1.1
nginx-offline-buildpack1.1.34
nodejs-offline-buildpack1.7.66
notifications62
notifications-ui40
php-offline-buildpack4.4.55
push-apps-manager-release675.0.3
push-usage-service-release674.0.23
pxc0.41.0
python-offline-buildpack1.7.49
r-offline-buildpack1.1.25
routing0.228.0
ruby-offline-buildpack1.8.50
silk2.43.0
smb-volume3.1.0
smoke-tests4.4.0
staticfile-offline-buildpack1.5.28
statsd-injector1.11.18
syslog11.7.7
system-metrics-scraper3.2.4
uaa74.5.31

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.6

Release Date: 12/21/2021

Warning:

See the following warnings:

Note: This version of TAS for VMs contains a known issue that can cause application traces to break. See Gorouter Sets an Invalid X-B3-SpanID Header in Known Issues.

  • [Security Fix] Fix uncontrolled recursion related to Log4j (CVE-2021-45105)
  • [Bug Fix] Cloud Controller Worker: PruneExcessAppRevisions job is more memory efficient
  • [Breaking Change] Gorouter: zipkin trace-id size complies with w3 standard of 16 bytes opposed to the previous 8 bytes.
  • Bump credhub to version 2.9.8 which has Log4j 2.17.0
  • Bump java-offline-buildpack to version 4.47
  • Bump routing to version 0.227.0
  • Bump uaa to version 74.5.30 which has Log4j 2.17.0
Component Version
ubuntu-xenial stemcell~621
backup-and-restore-sdk1.18.28
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.15
capi1.117.2
cf-autoscaling242
cf-cli (v7/v8)*1.33.0
cf-networking2.42.0
cflinuxfs30.268.0
credhub2.9.8
diego2.54.0
dotnet-core-offline-buildpack2.3.36
garden-runc1.19.30
go-offline-buildpack1.9.37
haproxy11.6.0
java-offline-buildpack4.47
log-cache2.11.4
loggregator106.6.1
loggregator-agent6.3.5
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.32
nodejs-offline-buildpack1.7.63
notifications62
notifications-ui40
php-offline-buildpack4.4.53
push-apps-manager-release675.0.1
push-usage-service-release674.0.23
pxc0.39.0
python-offline-buildpack1.7.47
r-offline-buildpack1.1.23
routing0.227.0
ruby-offline-buildpack1.8.48
silk2.41.0
smb-volume3.1.0
smoke-tests4.3.1
staticfile-offline-buildpack1.5.26
statsd-injector1.11.16
syslog11.7.6
system-metrics-scraper3.2.3
uaa74.5.30

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.5

Release Date: 12/16/2021

Warning:

See the following warnings:

Note: This version of TAS for VMs contains a known issue that can cause application traces to break. See Gorouter Sets an Invalid X-B3-SpanID Header in Known Issues.

  • [Security Fix] Fix remote code execution vulnerability related to Log4j (CVE-2021-45046)
  • Bump credhub to version 2.9.7 which has Log4j 2.16.0
  • Bump java-offline-buildpack to version 4.45
  • Bump php-offline-buildpack to version 4.4.53
  • Bump uaa to version 74.5.29 which has Log4j 2.16.0
Component Version
ubuntu-xenial stemcell~621
backup-and-restore-sdk1.18.28
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.15
capi1.117.2
cf-autoscaling242
cf-cli (v7/v8)*1.33.0
cf-networking2.42.0
cflinuxfs30.268.0
credhub2.9.7
diego2.54.0
dotnet-core-offline-buildpack2.3.36
garden-runc1.19.30
go-offline-buildpack1.9.37
haproxy11.6.0
java-offline-buildpack4.45
log-cache2.11.4
loggregator106.6.1
loggregator-agent6.3.5
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.32
nodejs-offline-buildpack1.7.63
notifications62
notifications-ui40
php-offline-buildpack4.4.53
push-apps-manager-release675.0.1
push-usage-service-release674.0.23
pxc0.39.0
python-offline-buildpack1.7.47
r-offline-buildpack1.1.23
routing0.227.0
ruby-offline-buildpack1.8.48
silk2.41.0
smb-volume3.1.0
smoke-tests4.3.1
staticfile-offline-buildpack1.5.26
statsd-injector1.11.16
syslog11.7.6
system-metrics-scraper3.2.3
uaa74.5.29

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.4

Release Date: 12/15/2021

Note: This version of TAS for VMs contains a known issue that can cause application traces to break. See Gorouter Sets an Invalid X-B3-SpanID Header in Known Issues.

Warning:

See the following warnings:

  • [Security Fix] Java and PHP Buildpacks - Fix remote code execution vulnerability related to Log4j (CVE-2021-44228)
  • [Bug Fix] Fix “pre-start scripts failed. Failed Jobs: policy-server” error Upgrading to CF Networking Release v2.40.0
  • [Bug Fix] Enables audit logging file rotation to reduce I/O load during log rotation
  • [Bug Fix] Smoke Tests uses specified domain for Isolation Segments
  • [Feature Improvement] Cloud Controller - Allow operators to configure the Cloud Controller monit healthcheck timeout
  • Bump capi to version 1.117.2
  • Bump cf-cli to version 1.33.0
  • Bump cf-networking to version 2.42.0
  • Bump garden-runc to version 1.19.30
  • Bump haproxy to version 11.6.0
  • Bump java-offline-buildpack to version 4.44
  • Bump php-offline-buildpack to version 4.4.52
  • Bump smoke-tests to version 4.3.1
Component Version
ubuntu-xenial stemcell~621
backup-and-restore-sdk1.18.28
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.15
capi1.117.2
cf-autoscaling242
cf-cli (v7/v8)*1.33.0
cf-networking2.42.0
cflinuxfs30.268.0
credhub2.9.6
diego2.54.0
dotnet-core-offline-buildpack2.3.36
garden-runc1.19.30
go-offline-buildpack1.9.37
haproxy11.6.0
java-offline-buildpack4.44
log-cache2.11.4
loggregator106.6.1
loggregator-agent6.3.5
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.32
nodejs-offline-buildpack1.7.63
notifications62
notifications-ui40
php-offline-buildpack4.4.52
push-apps-manager-release675.0.1
push-usage-service-release674.0.23
pxc0.39.0
python-offline-buildpack1.7.47
r-offline-buildpack1.1.23
routing0.227.0
ruby-offline-buildpack1.8.48
silk2.41.0
smb-volume3.1.0
smoke-tests4.3.1
staticfile-offline-buildpack1.5.26
statsd-injector1.11.16
syslog11.7.6
system-metrics-scraper3.2.3
uaa74.5.28

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.3

Release Date: 12/13/2021

Warning:

See the following warnings:

  • [Security Fix] UAA and CredHub - Fix remote code execution vulnerability related to Log4j (CVE-2021-44228)
  • [Bug Fix] Diego - Envoy v1.19 uses the original TCP connection pool so that it can accept more than 1024 downstream connections
  • Bump credhub to version 2.9.6 which has Log4j 2.15.0
  • Bump diego to version 2.54.0
  • Bump uaa to version 74.5.28 which has Log4j 2.15.0
Component Version
ubuntu-xenial stemcell621.176
backup-and-restore-sdk1.18.26
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.15
capi1.117.1
cf-autoscaling241
cf-cli (v7/v8)*1.33.0
cf-networking2.40.0
cflinuxfs30.264.0
credhub2.9.6
diego2.54.0
dotnet-core-offline-buildpack2.3.36
garden-runc1.19.30
go-offline-buildpack1.9.37
haproxy11.6.0
java-offline-buildpack4.42
log-cache2.11.4
loggregator106.6.1
loggregator-agent6.3.4
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.32
nodejs-offline-buildpack1.7.63
notifications62
notifications-ui40
php-offline-buildpack4.4.48
push-apps-manager-release675.0.1
push-usage-service-release674.0.23
pxc0.39.0
python-offline-buildpack1.7.47
r-offline-buildpack1.1.23
routing0.226.0
ruby-offline-buildpack1.8.48
silk2.40.0
smb-volume3.1.0
smoke-tests4.3.0
staticfile-offline-buildpack1.5.26
statsd-injector1.11.16
syslog11.7.5
system-metrics-scraper3.2.3
uaa74.5.28

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.2

Release Date: 11/23/2021

  • Bump backup-and-restore-sdk to version 1.18.26
  • Bump bpm to version 1.1.15
  • Bump cf-autoscaling to version 241
  • Bump cf-networking to version 2.40.0
  • Bump cflinuxfs3 to version 0.264.0
  • Bump diego to version 2.53.1
  • Bump dotnet-core-offline-buildpack to version 2.3.36
  • Bump go-offline-buildpack to version 1.9.37
  • Bump haproxy to version 11.6.0
  • Bump loggregator to version 106.6.1
  • Bump nodejs-offline-buildpack to version 1.7.63
  • Bump php-offline-buildpack to version 4.4.48
  • Bump python-offline-buildpack to version 1.7.47
  • Bump r-offline-buildpack to version 1.1.23
  • Bump routing to version 0.226.0
  • Bump ruby-offline-buildpack to version 1.8.48
  • Bump silk to version 2.40.0
  • Bump staticfile-offline-buildpack to version 1.5.26
Component Version
ubuntu-xenial stemcell~621
backup-and-restore-sdk1.18.26
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.15
capi1.117.1
cf-autoscaling241
cf-cli (v7/v8)*1.33.0
cf-networking2.40.0
cflinuxfs30.264.0
credhub2.9.4
diego2.53.1
dotnet-core-offline-buildpack2.3.36
garden-runc1.19.30
go-offline-buildpack1.9.37
haproxy11.6.0
java-offline-buildpack4.42
log-cache2.11.4
loggregator106.6.1
loggregator-agent6.3.4
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.32
nodejs-offline-buildpack1.7.63
notifications62
notifications-ui40
php-offline-buildpack4.4.48
push-apps-manager-release675.0.1
push-usage-service-release674.0.23
pxc0.39.0
python-offline-buildpack1.7.47
r-offline-buildpack1.1.23
routing0.226.0
ruby-offline-buildpack1.8.48
silk2.40.0
smb-volume3.1.0
smoke-tests4.3.0
staticfile-offline-buildpack1.5.26
statsd-injector1.11.16
syslog11.7.5
system-metrics-scraper3.2.3
uaa74.5.26

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.1

Release Date: 10/20/2021

  • [Security Fix] CAPI - Cap label selectors at 50 in queries and improve label selector performance to mitigate DOS vulnerability CVE-2021-22101
  • [Feature Improvement] HTTP/2 toggle disables Diego container proxy ALPN
  • [Feature Improvement] Set default for system metrics scrape interval to 15 seconds
  • [Bug Fix] CAPI - Some metrics for CAPI were not being properly emitted
  • [Bug Fix] Fix certificate rotation by fixing CredHub’s import of concatenated certificates
  • [Bug Fix] Fix “System metrics scrape interval” configuration in manifest
  • Bump backup-and-restore-sdk to version 1.18.22
  • Bump bpm to version 1.1.14
  • Bump capi to version 1.117.1
  • Bump cflinuxfs3 to version 0.262.0
  • Bump credhub to version 2.9.4
  • Bump log-cache to version 2.11.4
  • Bump nginx-offline-buildpack to version 1.1.32
  • Bump nodejs-offline-buildpack to version 1.7.61
  • Bump push-usage-service-release to version 674.0.23
  • Bump pxc to version 0.39.0
  • Bump python-offline-buildpack to version 1.7.46
  • Bump r-offline-buildpack to version 1.1.22
  • Bump ruby-offline-buildpack to version 1.8.47
  • Bump uaa to version 74.5.26
Component Version
ubuntu-xenial stemcell621.0
backup-and-restore-sdk1.18.22
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.14
capi1.117.1
cf-autoscaling239
cf-cli (v7/v8)*1.33.0
cf-networking2.38.0
cflinuxfs30.262.0
credhub2.9.4
diego2.53.0
dotnet-core-offline-buildpack2.3.34
garden-runc1.19.30
go-offline-buildpack1.9.34
haproxy11.4.4
java-offline-buildpack4.42
log-cache2.11.4
loggregator-agent6.3.4
loggregator106.6.0
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.32
nodejs-offline-buildpack1.7.61
notifications-ui40
notifications62
php-offline-buildpack4.4.45
push-apps-manager-release675.0.1
push-usage-service-release674.0.23
pxc0.39.0
python-offline-buildpack1.7.46
r-offline-buildpack1.1.22
routing0.224.0
ruby-offline-buildpack1.8.47
silk2.38.0
smb-volume3.1.0
smoke-tests4.3.0
staticfile-offline-buildpack1.5.24
statsd-injector1.11.16
syslog11.7.5
system-metrics-scraper3.2.3
uaa74.5.26

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

v2.12.0

Release Date: October 4, 2021

Component Version
ubuntu-xenial stemcell621.0
backup-and-restore-sdk1.18.18
binary-offline-buildpack1.0.40
bosh-dns-aliases0.0.4
bosh-system-metrics-forwarder0.0.20
bpm1.1.13
capi1.117.0
cf-autoscaling239
cf-cli (v7/v8)*1.33.0
cf-networking2.38.0
cflinuxfs30.259.0
credhub2.9.1
diego2.53.0
dotnet-core-offline-buildpack2.3.34
garden-runc1.19.30
go-offline-buildpack1.9.34
haproxy11.4.4
java-offline-buildpack4.42
log-cache2.11.2
loggregator-agent6.3.4
loggregator106.6.0
mapfs1.2.6
metric-registrar1.2.2
metrics-discovery3.0.6
mysql-monitoring9.15.0
nats40
nfs-volume7.1.1
nginx-offline-buildpack1.1.31
nodejs-offline-buildpack1.7.57
notifications-ui40
notifications62
php-offline-buildpack4.4.45
push-apps-manager-release675.0.1
push-usage-service-release674.0.20
pxc0.37.0
python-offline-buildpack1.7.45
r-offline-buildpack1.1.21
routing0.224.0
ruby-offline-buildpack1.8.46
silk2.38.0
smb-volume3.1.0
smoke-tests4.3.0
staticfile-offline-buildpack1.5.24
statsd-injector1.11.16
syslog11.7.5
system-metrics-scraper3.2.3
uaa74.5.25

* The cf-cli version corresponds to the commercial distribution on VMware Tanzu Network.

How to Upgrade

To upgrade to TAS for VMs v2.12, see Configuring TAS for VMs for Upgrades.

When upgrading to TAS for VMs v2.12, be aware of the following upgrade considerations:

  • If you previously used an earlier version of TAS for VMs, you must first upgrade to TAS for VMs v2.11 to successfully upgrade to TAS for VMs v2.12.

  • Upgrade the cf CLI to the latest cf CLI v7 release, the latest cf CLI v8 release, or the commercial cf CLI distribution available on VMware Tanzu Network.

  • To minimize downtime for developers pushing apps, upgrade from TAS for VMs v2.11.9 or later. Upgrading from earlier patch versions can result in an Unknown Error when pushing apps.

  • Some partner service tiles may be incompatible with TAS for VMs v2.12. VMware is working with partners to ensure their tiles are updated to work with the latest versions of TAS for VMs. For information about which partner service releases are currently compatible with TAS for VMs v2.12, review the appropriate partners services release documentation at https://docs.pivotal.io or contact the partner organization that produces the tile.

New Features in TAS for VMs v2.12

TAS for VMs v2.12 includes the following major features:

TAS for VMs Is Compatible with cf CLI v8

TAS for VMs v2.12 paired with cf CLI v8 allows you to do the following:

  • Push apps with end-to-end HTTP/2 routing

  • Assign the Space Supporter role to users

  • Manage services asynchronously

For more information, see Upgrading to cf CLI v8.

Gorouter Supports HTTP/2

Breaking Change:: See Envoy Advertises HTTP/2 Support Over ALPN below.

In TAS for VMs v2.12 and later, HTTP/2 support is enabled by default. HTTP/2 is the second major version of the the HTTP protocol.

HTTP/2 features the following improvements over HTTP/1.1:

  • Uses a binary data format instead of plain text

  • Compresses headers

  • Multiplexes multiple HTTP requests over a single TCP connection

Together, these improvements can improve response times for some apps.

For more information about the HTTP/2 protocol, see RFC 7540.

For information about configuring support for HTTP/2 in TAS for VMs, see Configuring HTTP/2 Support.

For information about routing HTTP/2 traffic to your TAS for VMs apps, see Routing HTTP/2 and gRPC Traffic to Apps.

Gorouter Supports TLS v1.3

In TAS for VMs v2.12, the Gorouter supports TLS v1.3. New installations of TAS for VMs use TLS v1.3 for the Gorouter by default. If you are upgrading to TAS for VMs v2.12, the Gorouter uses TLS v1.2 by default.

You can select which versions of TLS that the Gorouter uses when you configure TAS for VMs. Selecting support for TLS v1.3 only is a beta feature in TAS for VMs v2.12.

For more information, see (Beta) Gorouter Can Support TLS v1.3 Connections Only below.

New User Role: Space Supporter

TAS for VMs v2.12 introduces the Space Supporter role. Users with the Space Supporter role can do the following:

  • View app logs and audit events

  • Start, stop, and restart apps

  • Scale apps

  • Read, bind, and unbind existing service instances

Users with the Space Supporter role cannot do any of the following:

  • View credentials or app data

  • Edit app source code

  • SSH into app instances

  • View the app environment

  • Create or access service keys

  • Create or update services

  • Delete apps or services

The Space Supporter role is only available for the Cloud Controller V3 API. If a user with this role tries to access a V2 endpoint, the API returns a 403 error.

For more information, see User Roles in Orgs, Spaces, Roles, and Permissions.

TAS for VMs Version is in Apps Manager UI

You can find the current version of TAS for VMs in the footer of the Apps Manager UI.

Secure Endpoint for the Metric Registrar

TAS for VMs v2.12 allows operators to register a secure endpoint for the Metric Registrar CLI plugin to ingest app metrics. You can use the cf register-metrics-endpoint command to specify an internal port in your app when you register the endpoint to the Metric Registrar.

For more information, see Register a Metrics Endpoint in Using Metric Registrar.

Reduce Traffic to Syslog Drains

In TAS for VMs v2.12, the System Logging pane includes the Default Loggregator drain metadata checkbox. This configuration setting controls how much deployment metadata TAS for VMs sends in app and aggregate syslog drains.

If you activate this checkbox, TAS for VMs sends all metadata from your deployment to syslog drains.

If you deactivate this checkbox, TAS for VMs sends a reduced amount of metadata. This can reduce your external database logs by up to 50%.

For more information, see (Optional) Configure System Logging in Configuring TAS for VMs.

Aggregate Drains are Moved to the Syslog Binding Cache

Aggregate drains are now stored and retrieved from the syslog binding cache. This means that TAS for VMs deployments that change aggregate drains only deploy on the binding cache/clock VM. TAS for VMs does not deploy all VMs on the system. As a result, TAS for VMs deploys more quickly.

This change also removes the Log Cache drain when not in use, reducing BOSH error logs when syslog ingestion for Log Cache is not in use.

Supported cf CLI Container Images

VMware supports the following container images that contain the cf CLI:

VMware maintains these container images and updates them with the latest security patches.

Breaking Changes

TAS for VMs v2.12 includes the following breaking changes:

(Beta) Gorouter Can Support TLS v1.3 Connections Only

TLS v1.3 is not compatible with some versions of Java. If you configure TAS for VMs to support TLS v1.3 only, you might encounter errors with Java apps. For more information, see JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3 in the JDK Bug System.

The tile property that controls the TLS version in TAS for VMs changes in TAS for VMs v2.12. You must update any stored configuration files to reflect the change.

Envoy Advertises HTTP/2 Support Over ALPN

Envoy, the Diego container proxy, advertises HTTP/2 support using Application-Layer Protocol Negotiation (ALPN) for all apps. Internal clients that access the Envoy TLS port directly must negotiate down to HTTP/1.1 for apps that do not support HTTP/2. The Envoy TLS port is typically 61001. Clients that connect to apps using the Gorouter are not affected.

Gorouter No Longer De-chunks Short Chunked Responses

In previous versions of TAS for VMs, the Gorouter de-chunked short chunked responses, set a Content-Length header, and sent a traditional body. This capability was available when Gorouter used Golang v1.15, which is out of support.

For versions of TAS for VMs that contain routing-release v0.214.0 and later, the Gorouter uses Golang v1.16 which sends a chunked response. If your clients or proxies that access apps cannot handle a chunked response, or expect a Content-Length header, they break.

For more information, see Clients receive responses with no Content-Length header and a chunked encoded body after upgrading Tanzu Application Service for VMs in the Knowledge Base.

Known Issues

TAS for VMs v2.12 includes the following known issues:

HAProxy Does Not Support HTTP/2

HAProxy is not configured to support HTTP/2 ingress traffic. HAProxy also does not send HTTP/2 traffic to the Gorouter, even when HTTP/2 is enabled.

To work around this issue, you can use an external load balancer to support HTTP/2 traffic. For more information, see Configure Load Balancers in Configuring HTTP/2 Support.

This issue is resolved in TAS for VMs v2.12.2 and later.

Pre-Start Scripts Fail on the policy-server Job

When upgrading to TAS for VMs v2.12.2, the policy-server pre-start script runs a database migration that drops a stored procedure that is no longer needed. If your networkpolicyserver database does not have the stored procedure, you might see the following error in diego_database policy-server stdout logs:

PROCEDURE networkpolicyserver.drop_destination_index does not exist handling 66

To work around this error, add the migration to your networkpolicyserver.gorp_migrations table and skip the migration.

For more information, see “pre-start scripts failed. Failed Jobs: policy-server” error Upgrading to CF Networking Release 2.40.0 in Tanzu Application Service for VMs in the Knowledge Base.

Gorouter Sets an Invalid X-B3-SpanID Header

An issue with the Gorouter’s implementation of X-B3-SpanId and X-B3-TraceId headers can cause invalid span IDs to be set after updating the X-B3-TraceId header to the new 16-byte standard. As a result, some applications and libraries invalidate the X-B3-SpanId value, breaking traces of the application.

This issue affects versions of TAS for VMs that contain routing-release v0.227.0 and v0.228.0.

java-offline-buildpack v4.52 Disallows Spring Auto Reconfiguration by Default

TAS for VMs v2.12.18 includes java-offline-buildpack v4.52, which disallows Spring Auto Reconfiguration by default. This change creates the following issues:

  • TAS for VMs v2.12.18 is incompatible with some service tiles, including Spring Cloud Data Flow (SCDF).

  • TAS for VMs cannot bind apps that use java-offline-buildpack v4.52 to service instances.

This known issue does not affect apps until you re-stage them.

Because the effects of this change are so disruptive, a patch release to fix this known issue is currently in development.

To temporarily restore the previous functionality of Spring Auto Reconfiguration for your apps:

  1. Set the JBP_CONFIG_SPRING_AUTO_RECONFIGURATION environment variable for your apps by running one of the following commands:

    • To restore the previous functionality of Spring Auto Reconfiguration on a per-app basis, run:
      cf set-env APP-NAME JBP_CONFIG_SPRING_AUTO_RECONFIGURATION '{enabled: true}'
    

    Where APP-NAME is the name of your app. * To restore the previous functionality of Spring Auto Reconfiguration for all apps in your TAS for VMs deployment, run:

      cf set-staging-environment-variable-group '{"JBP_CONFIG_SPRING_AUTO_RECONFIGURATION ":"{enabled: true}"}'
    

For more information about the deprecation of Spring Cloud Connectors and Spring Auto Reconfiguration in java-offline-buildpack v4.52, see Java Buildpack - Deprecation of Spring Cloud Connectors & Spring Auto Reconfiguration in the VMware Tanzu Knowledge Base.