buildpack upgrades: Java and PHP

Scheduled Maintenance Report for GOV.UK Platform as a Service (PaaS)

Completed

The scheduled maintenance has been completed.

Posted Dec 22, 2021 - 10:00 GMT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Dec 22, 2021 - 08:00 GMT

Scheduled

We will be upgrading the Java and PHP buildpacks at 8am on 22 December 2021.

The Java buildpack upgrade addresses [CVE-2021-45046](https://github.com/advisories/GHSA-7rjr-3q55-vv33), [CVE-2021-45105](https://github.com/advisories/GHSA-p6xc-xr62-6r2g)

The PHP buildpack upgrade addresses [CVE-2021-45046](https://github.com/advisories/GHSA-7rjr-3q55-vv33), [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q)

Please make sure that the versions of the languages you’ve pinned are compatible with the versions available in the planned releases. If you've pinned the patch version, you will need to review the release notes below to confirm if it's supported.

You will need to restage your applications in order for the upgraded buildpack to take effect.

We will update statuspage when the fix has rolled out and apps can be restaged.

If you have any problems using the new version in the buildpacks, or working to these timelines, please contact us via our help desk: gov-uk-paas-support@digital.cabinet-office.gov.uk

Regards,

The GOV.UK PaaS team

Planned Releases:

java-buildpack-v4.47
https://github.com/cloudfoundry/java-buildpack/releases/tag/v4.47

php-buildpack-v4.4.53
https://github.com/cloudfoundry/php-buildpack/releases/tag/v4.4.53

Posted Dec 21, 2021 - 16:21 GMT

This scheduled maintenance affected: London (Buildpacks) and Ireland (Buildpacks).