Skip to content
This repository has been archived by the owner on Oct 10, 2023. It is now read-only.

0.345.0

Compare
Choose a tag to compare
@cf-buildpacks-eng cf-buildpacks-eng released this 08 Dec 18:25
· 24 commits to main since this release

Notably, this release addresses:

USN-5766-1 USN-5766-1: Heimdal vulnerability:

  • CVE-2022-41916: Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any third-party applications using Heimdal's libhx509. Users should upgrade to Heimdal 7.7.1 or 7.8. There are no known workarounds for this issue.
-ii  libasn1-8-heimdal:amd64    7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - ASN.1 library
+ii  libasn1-8-heimdal:amd64    7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - ASN.1 library
-ii  libgssapi3-heimdal:amd64   7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - GSSAPI support library
+ii  libgssapi3-heimdal:amd64   7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - GSSAPI support library
-ii  libhcrypto4-heimdal:amd64  7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - crypto library
-ii  libheimbase1-heimdal:amd64 7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - Base library
-ii  libheimntlm0-heimdal:amd64 7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - NTLM support library
+ii  libhcrypto4-heimdal:amd64  7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - crypto library
+ii  libheimbase1-heimdal:amd64 7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - Base library
+ii  libheimntlm0-heimdal:amd64 7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - NTLM support library
-ii  libhx509-5-heimdal:amd64   7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - X509 support library
+ii  libhx509-5-heimdal:amd64   7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - X509 support library
-ii  libkrb5-26-heimdal:amd64   7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - libraries
+ii  libkrb5-26-heimdal:amd64   7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - libraries
-ii  libroken18-heimdal:amd64   7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - roken support library
+ii  libroken18-heimdal:amd64   7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - roken support library
-ii  libwbclient0:amd64         2:4.7.6+dfsg~ubuntu-0ubuntu2.28 amd64  Samba winbind client library
+ii  libwbclient0:amd64         2:4.7.6+dfsg~ubuntu-0ubuntu2.29 amd64  Samba winbind client library
-ii  libwind0-heimdal:amd64     7.5.0+dfsg-1ubuntu0.1           amd64  Heimdal Kerberos - stringprep implementation
+ii  libwind0-heimdal:amd64     7.5.0+dfsg-1ubuntu0.2           amd64  Heimdal Kerberos - stringprep implementation