Skip to content
This repository was archived by the owner on Mar 16, 2022. It is now read-only.

1.171.0

Choose a tag to compare

View all tags
@cf-buildpacks-eng cf-buildpacks-eng released this 05 Dec 19:15
· 120 commits to master since this release
1.171.0
dba1322

Notably, this release addresses:

USN-3501-1 Ubuntu Security Notice USN-3501-1:

USN-3498-1 Ubuntu Security Notice USN-3498-1:

  • CVE-2017-8816: The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.
  • CVE-2017-8817: The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.

USN-3496-3 Ubuntu Security Notice USN-3496-3:

  • CVE-2017-1000158: CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

USN-3496-1 Ubuntu Security Notice USN-3496-1:

  • CVE-2017-1000158: CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

USN-3489-1 Ubuntu Security Notice USN-3489-1:

-ii  curl                       7.35.0-1ubuntu2.12        amd64 command line tool for transferring data with URL syntax
+ii  curl                       7.35.0-1ubuntu2.13        amd64 command line tool for transferring data with URL syntax
-ii  libcurl3:amd64             7.35.0-1ubuntu2.12        amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
-ii  libcurl3-gnutls:amd64      7.35.0-1ubuntu2.12        amd64 easy-to-use client-side URL transfer library (GnuTLS flavour)
-ii  libcurl4-openssl-dev:amd64 7.35.0-1ubuntu2.12        amd64 development files and documentation for libcurl (OpenSSL flavour)
+ii  libcurl3:amd64             7.35.0-1ubuntu2.13        amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
+ii  libcurl3-gnutls:amd64      7.35.0-1ubuntu2.13        amd64 easy-to-use client-side URL transfer library (GnuTLS flavour)
+ii  libcurl4-openssl-dev:amd64 7.35.0-1ubuntu2.13        amd64 development files and documentation for libcurl (OpenSSL flavour)
-ii  libdb5.3:amd64             5.3.28-3ubuntu3           amd64 Berkeley v5.3 Database Libraries [runtime]
+ii  libdb5.3:amd64             5.3.28-3ubuntu3.1         amd64 Berkeley v5.3 Database Libraries [runtime]
-ii  libpython2.7-minimal:amd64 2.7.6-8ubuntu0.3          amd64 Minimal subset of the Python language (version 2.7)
-ii  libpython2.7-stdlib:amd64  2.7.6-8ubuntu0.3          amd64 Interactive high-level object-oriented language (standard library, version 2.7)
+ii  libpython2.7-minimal:amd64 2.7.6-8ubuntu0.4          amd64 Minimal subset of the Python language (version 2.7)
+ii  libpython2.7-stdlib:amd64  2.7.6-8ubuntu0.4          amd64 Interactive high-level object-oriented language (standard library, version 2.7)
-ii  libpython3.4:amd64         3.4.3-1ubuntu1~14.04.5    amd64 Shared Python runtime library (version 3.4)
-ii  libpython3.4-minimal:amd64 3.4.3-1ubuntu1~14.04.5    amd64 Minimal subset of the Python language (version 3.4)
-ii  libpython3.4-stdlib:amd64  3.4.3-1ubuntu1~14.04.5    amd64 Interactive high-level object-oriented language (standard library, version 3.4)
+ii  libpython3.4:amd64         3.4.3-1ubuntu1~14.04.6    amd64 Shared Python runtime library (version 3.4)
+ii  libpython3.4-minimal:amd64 3.4.3-1ubuntu1~14.04.6    amd64 Minimal subset of the Python language (version 3.4)
+ii  libpython3.4-stdlib:amd64  3.4.3-1ubuntu1~14.04.6    amd64 Interactive high-level object-oriented language (standard library, version 3.4)
-ii  libxcursor1:amd64          1:1.1.14-1                amd64 X cursor management library
+ii  libxcursor1:amd64          1:1.1.14-1ubuntu0.14.04.1 amd64 X cursor management library
-ii  python2.7                  2.7.6-8ubuntu0.3          amd64 Interactive high-level object-oriented language (version 2.7)
-ii  python2.7-minimal          2.7.6-8ubuntu0.3          amd64 Minimal subset of the Python language (version 2.7)
+ii  python2.7                  2.7.6-8ubuntu0.4          amd64 Interactive high-level object-oriented language (version 2.7)
+ii  python2.7-minimal          2.7.6-8ubuntu0.4          amd64 Minimal subset of the Python language (version 2.7)
-ii  python3.4                  3.4.3-1ubuntu1~14.04.5    amd64 Interactive high-level object-oriented language (version 3.4)
-ii  python3.4-minimal          3.4.3-1ubuntu1~14.04.5    amd64 Minimal subset of the Python language (version 3.4)
+ii  python3.4                  3.4.3-1ubuntu1~14.04.6    amd64 Interactive high-level object-oriented language (version 3.4)
+ii  python3.4-minimal          3.4.3-1ubuntu1~14.04.6    amd64 Minimal subset of the Python language (version 3.4)
-ii  resolvconf                 1.69ubuntu1.1             all   name server information handler
+ii  resolvconf                 1.69ubuntu1.3             all   name server information handler
Assets 3
Loading