---

- type: replace
  path: /releases/name=cflinuxfs2
  value:
    name: cflinuxfs2
    url: https://bosh.io/d/github.com/cloudfoundry/cflinuxfs2-release?v=1.241.0
    version: 1.241.0
    sha1: adce7383e1eb8d60351c1204d0d947a235893c39

---

- type: replace
  path: /releases/name=cflinuxfs2
  value:
    name: cflinuxfs2
    url: https://bosh.io/d/github.com/cloudfoundry/cflinuxfs2-release?v=1.242.0
    version: 1.242.0
    sha1: 99821c729c05646c203a684a15a0971a5af08e35

Update cflinuxfs2 to 1.242.0 to fix git CVE
Update cflinuxfs2 to 1.242.0 to fix git CVE

Update to latest version of cflinuxfs2 to cover CVE USN-3791-1[1]

Git vulnerability

It was discovered that git did not properly validate git submodule urls
or paths. A remote attacker could possibly use this to craft a git
repository that causes arbitrary code execution when recursive
operations are used.

CVEs contained in this USN include: CVE-2018-17456

[1] https://www.cloudfoundry.org/blog/usn-3791-1/
