Platform Release Notes: March 27, 2017
Curious what’s new that you might find helpful as a cloud.gov application developer? Here are highlights from our platform updates over the past two weeks.
Added
When you create a cloud.gov identity provider service instance, you can now add scopes from a whitelist of approved scopes. This makes it easier to enable specific permissions and access for additional types of users in your applications.
Changed
We recommend updating to the latest version (6.25) of the Cloud Foundry command line interface (CLI). This can prevent errors when using the cf CLI. You can check your currently-installed version using cf -v
Fixed
The cloud.gov dashboard’s loading icon no longer displays after pages finish loading. Before, they would continue indefinitely.
Deprecated
- On March 15th, we deprecated support for building and deployment on the cloud.gov East/West environment. This is in preparation for an upcoming shutdown of that environment. We are supporting a few customers in the process of migrating from East/West to GovCloud, but in all other cases we now support the GovCloud environment exclusively.
- The latest Go buildpack deprecates support for Go 1.6. The next Go release will remove support for 1.6.
Removed
The latest Go buildpack no longer supports Go 1.5.
Security
We upgraded the Cloud Foundry deployment to v254. We have also upgraded the following buildpacks to versions newer than the buildpacks included in CF v254:
As part of the Cloud Foundry upgrade, the base filesystem used for running your application has been updated to address several security vulnerabilities. You should restage your application to incorporate fixes in the base filesystem and ensure you’re running the most recent language version supported by your buildpack.
- USN-3183-2: GnuTLS vulnerability
- USN-3189-2: Linux kernel (Xenial HWE) vulnerabilities
- USN-3213-1: GD library vulnerabilities
- USN-3220-2: Linux kernel (Xenial HWE) vulnerability
- USN-3222-1: ImageMagick vulnerabilities
- USN-3225-1: libarchive vulnerabilities
- USN-3227-1: ICU vulnerabilities
- USN-3232-1: ImageMagick vulnerabilities
- USN-3235-1: libxml2 vulnerabilities
- USN-3237-1: FreeType vulnerability
- USN-3239-1: GNU C Library vulnerabilities
See also
If you’re interested in details about recent dashboard updates, you can also see the dashboard release notes.