v9.2.0

Breaking Changes

This is a security release to ensure existing Shield deployments are not impacted by CVEs found in earlier libraries and OSs. In providing this release, some functionality was unfortunately lost due to changes upstream that contained the security fixes.

• This boshrelease requires the ubuntu-jammy stemcell, because shield was compiled against it to resolve OS CVEs and bugs.

• Due to updates to vault for security reasons, this version of shield no longer is able to initialize a new shield deployment, but can still update an existing shield deployment. This will be resolved in a future release, but in the mean time, deploy with the v9.1.0 deployment first.

Software Updates

• Updated shield from 8.8.6 to 8.8.7
• Updated nginx from 1.25.1 to 1.26.1
• Updated pcre from pcre2-10.42 to pcre2-10.44
• Updated vault from 1.14.0 to 1.17.2
• Updated sqlite from 3420000 to 3460000

Deployment

releases:
- name:    shield
  version: 9.2.0
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v9.2.0/shield-boshrelease-9.2.0.tgz
  sha1:   3b59c76585efcf7dd32749b3e96c42544886dd72

Full Changelog: v9.1.2...v9.2.0

v9.2.0-rc2

Breaking Changes

This is a security release to ensure existing Shield deployments are not impacted by CVEs found in earlier libraries and OSs. In providing this release, some functionality was unfortunately lost due to changes upstream that contained the security fixes.

• This boshrelease requires the ubuntu-jammy stemcell, because shield was compiled against it to resolve OS CVEs and bugs.

• Due to updates to vault for security reasons, this version of shield no longer is able to initialize a new shield deployment, but can still update an existing shield deployment. This will be resolved in a future release, but in the mean time, deploy with the v9.1.0 deployment first.

Software Updates

• Updated shield from 8.8.6 to 8.8.7-rc1
• Updated nginx from 1.25.1 to 1.26.1
• Updated pcre from pcre2-10.42 to pcre2-10.44
• Updated vault from 1.14.0 to 1.17.2
• Updated sqlite from 3420000 to 3460000

Deployment

releases:
- name:    shield
  version: 9.2.0-rc2
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v9.1.2/shield-9.1.2.tgz
  sha1:   0748d4b4b209927bde1687c2c83e350a172d029b

Full Changelog: v9.1.2...v9.2.0-rc1

v9.1.2

Breaking Changes

This is a security release to ensure existing Shield deployments are not impacted by CVEs found in earlier libraries and OSs. In providing this release, some functionality was unfortunately lost due to changes upstream that contained the security fixes.

• This boshrelease requires the ubuntu-jammy stemcell, because shield was compiled against it to resolve OS CVEs and bugs.

• This release contains shield v8.8.6. This version contains many library updated in order to resolve outstanding vulnerabilities, but as a side effect, the libraries needed for the Azure plugin introduced an incompatibility upstream. This will be resolved in a future release, but for now, don't upgrade if you are using the Azure plugin

• Due to updates to vault for security reasons, this version of shield no longer is able to initialize a new shield deployment, but can still update an existing shield deployment. This will be resolved in a future release, but in the mean time, deploy with the v9.1.0 deployment.

Software Updates

• Updated shield from 8.8.5 to 8.8.6
• Updated nginx from 1.22.0 to 1.25.1
• Updated pcre from pcre-8.45 to pcre2-10.42
• Updated vault from 1.11.4 to 1.14.0
• Updated sqlite from 3390400 to 3420000

Deployment

releases:
- name:    shield
  version: 9.1.2
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v9.1.2/shield-9.1.2.tgz
  sha1:    b9df5d9137f13947681a217a99637651545c4dea

Full Changelog: v9.1.0...v9.1.2

shield v9.1.0

SHIELD BOSH Release v9.1.0

Changes

• Bump shield to v8.8.5
• Bump of vault to v1.11.4
• Bump of nginx to v1.22.0
• Bump of pcre to v8.45
• Bump of sqlite-autoconf to v3390400

Fixes

• Configure vault to have no limits on the amount of memory that it can lock. It Fixes the issue of vault crashing which leads shield to be locked.

Deployment

releases:
- name:    shield
  version: 9.1.0
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v9.1.0/shield-9.1.0.tgz
  sha1:    3d7023db0c59fc4153df93eeae7a6264c7e97f29

shield v8.8.6

shield

• Bumped shield to v8.8.5

Deployment

releases:
- name:    shield
  version: 8.8.6
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v8.8.6/shield-8.8.6.tgz
  sha1:    f58e1a37ebd66eb236aa11df3756e7af995117e0

shield v8.8.5

SHIELD BOSH Release v8.8.5 (BETA)

Shield boshrelease v8.8.5 is a Beta release.

Changes

• Bump of vault to version 1.11.4
• Bump of nginx to version 1.22.0
• Bump of pcre to version 8.45
• Bump of sqlite-autoconf to version 3390400

Fixes

• Configure vault to have no limits on the amount of memory that it can lock. It Fixes the issue of vault crashing which leads shield to be locked.

Deployment

releases:
- name:    shield
  version: 8.8.5
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v8.8.5/shield-8.8.5.tgz
  sha1:    63f26678cf54e4ae3dfba412eff0f2d89ae6209a

shield v8.8.4

shield

• Bumped shield to v8.8.4

Deployment

releases:
- name:    shield
  version: 8.8.4
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v8.8.4/shield-8.8.4.tgz
  sha1:    1e8cde9a9f594cd9705da204e4bbfc103c0269b0

shield v8.8.2

shield

• Bumped shield to v8.8.2

Deployment

releases:
- name:    shield
  version: 8.8.2
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v8.8.2/shield-8.8.2.tgz
  sha1:    e11a22dc142b8acc562736aa443660024efc18c3

shield v8.8.1

shield

• Bumped shield to v8.8.1

Deployment

releases:
- name:    shield
  version: 8.8.1
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v8.8.1/shield-8.8.1.tgz
  sha1:    ab8028ac22a6251f98434da940968610710769c3

shield v8.8.0

• upload new shield blob

• Bumped shield to v8.8.1

Deployment

releases:
- name:    shield
  version: 8.8.0
  url:     https://github.com/shieldproject/shield-boshrelease/releases/download/v8.8.0/shield-8.8.0.tgz
  sha1:    23f98e9880fd38f76f15b33be0f15510092190e7