1.56.0
cf-buildpacks-eng
released this
06 Dec 16:49
·
159 commits
to main
since this release
Notably, this release addresses:
USN-6535-1 USN-6535-1: curl vulnerabilities:
- CVE-2023-46218: cookie mixed case PSL bypass
- CVE-2023-46219: HSTS long file name clears contents
- CVE-2023-46219: HSTS long file name clears contents
- CVE-2023-46218: cookie mixed case PSL bypass
-ii curl 7.81.0-1ubuntu1.14 amd64 command line tool for transferring data with URL syntax
+ii curl 7.81.0-1ubuntu1.15 amd64 command line tool for transferring data with URL syntax
-ii libcurl3-gnutls:amd64 7.81.0-1ubuntu1.14 amd64 easy-to-use client-side URL transfer library (GnuTLS flavour)
-ii libcurl4:amd64 7.81.0-1ubuntu1.14 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
-ii libcurl4-openssl-dev:amd64 7.81.0-1ubuntu1.14 amd64 development files and documentation for libcurl (OpenSSL flavour)
+ii libcurl3-gnutls:amd64 7.81.0-1ubuntu1.15 amd64 easy-to-use client-side URL transfer library (GnuTLS flavour)
+ii libcurl4:amd64 7.81.0-1ubuntu1.15 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
+ii libcurl4-openssl-dev:amd64 7.81.0-1ubuntu1.15 amd64 development files and documentation for libcurl (OpenSSL flavour)