Releases: cloudfoundry/bpm-release
Releases · cloudfoundry/bpm-release
v1.1.23
Fixed CVEs:
- CVE-2022-41723: golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding
v1.1.21
- CVE-2021-44716: golang: net/http: limit growth of header canonicalization cache
- CVE-2022-27664: golang: net/http: handle server errors after sending GOAWAY
- CVE-2022-32149: golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags
v1.1.20
Full Changelog: v1.1.19...v1.1.20
v1.1.19
Dependency Bumps
Full Changelog: v1.1.18...v1.1.19
v1.1.18
Dependency Bumps
Full Changelog: v1.1.17...v1.1.18
v1.1.17
Full Changelog: v1.1.16...v1.1.17
Bump to go v1.18.1 and update vendored dependencies.
v1.1.16
Full Changelog: v1.1.15...v1.1.16
Updated to runc v1.10.0
v1.1.15
Full Changelog: v1.1.14...v1.1.15
- Bumped go to 1.17