@cf-buildpacks-eng cf-buildpacks-eng released this May 9, 2017 · 142 commits to master since this release

Assets 3

Notably, this release addresses:

USN-3283-1 Ubuntu Security Notice USN-3283-1:

  • CVE-2015-8270: The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).
  • CVE-2015-8271: The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
  • CVE-2015-8272: RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).

USN-3282-1 Ubuntu Security Notice USN-3282-1:

  • CVE-2017-8105: FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.
  • CVE-2017-8287: FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.
-ii  binutils           2.24-5ubuntu14.1                   amd64  GNU assembler, linker and binary utilities
+ii  binutils           2.24-5ubuntu14.2                   amd64  GNU assembler, linker and binary utilities
-ii  libfreetype6:amd64 2.5.2-1ubuntu2.7                   amd64  FreeType 2 font engine, shared library files
-ii  libfreetype6-dev   2.5.2-1ubuntu2.7                   amd64  FreeType 2 font engine, development files
+ii  libfreetype6:amd64 2.5.2-1ubuntu2.8                   amd64  FreeType 2 font engine, shared library files
+ii  libfreetype6-dev   2.5.2-1ubuntu2.8                   amd64  FreeType 2 font engine, development files
-ii  librtmp-dev        2.4+20121230.gitdf6c518-1          amd64  toolkit for RTMP streams (development files)
-ii  librtmp0:amd64     2.4+20121230.gitdf6c518-1          amd64  toolkit for RTMP streams (shared library)
+ii  librtmp-dev        2.4+20121230.gitdf6c518-1ubuntu0.1 amd64  toolkit for RTMP streams (development files)
+ii  librtmp0:amd64     2.4+20121230.gitdf6c518-1ubuntu0.1 amd64  toolkit for RTMP streams (shared library)