-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 01/18/2018 02:17 PM, noreply(a)fedoraproject.org wrote:
In this week's release of Fedora Atomic Host we have an updated
kernel (the spectre patches are slowly working their way out [1]),
and an updated docker with a security fix [2]. We also are *including*
firewalld in the ostree now [3], but we are *not* enabling it by
default. I'll post a follow up blog post on this topic in the next day
or two.
[1]
https://fedoramagazine.org/update-ongoing-meltdown-spectre-work/
[2]
https://bugzilla.redhat.com/show_bug.cgi?id=1510351
[3]
https://pagure.io/atomic-wg/issue/372
An example of the diff between this and the previous released version (for x86_64) is:
ostree diff commit old: 397e907961adafaeff11b807ceade8da5783134072406fcdba627f1195e0db76
ostree diff commit new: 772ab185b0752b0d6bc8b2096d08955660d80ed95579e13e136e6a54e3559ca9
Upgraded:
GeoIP-GeoLite-data 2017.10-1.fc27.noarch -> 2018.01-1.fc27.noarch
bash 4.4.12-12.fc27.x86_64 -> 4.4.12-13.fc27.x86_64
cockpit-bridge 158-1.fc27.x86_64 -> 159-1.fc27.x86_64
cockpit-docker 158-1.fc27.x86_64 -> 159-1.fc27.x86_64
cockpit-networkmanager 158-1.fc27.noarch -> 159-1.fc27.noarch
cockpit-ostree 158-1.fc27.x86_64 -> 159-1.fc27.x86_64
cockpit-system 158-1.fc27.noarch -> 159-1.fc27.noarch
container-selinux 2:2.37-1.fc27.noarch -> 2:2.38-1.fc27.noarch
dhcp-client 12:4.3.6-7.fc27.x86_64 -> 12:4.3.6-8.fc27.x86_64
dhcp-common 12:4.3.6-7.fc27.noarch -> 12:4.3.6-8.fc27.noarch
dhcp-libs 12:4.3.6-7.fc27.x86_64 -> 12:4.3.6-8.fc27.x86_64
docker 2:1.13.1-42.git4402c09.fc27.x86_64 -> 2:1.13.1-44.git584d391.fc27.x86_64
docker-common 2:1.13.1-42.git4402c09.fc27.x86_64 ->
2:1.13.1-44.git584d391.fc27.x86_64
docker-rhel-push-plugin 2:1.13.1-42.git4402c09.fc27.x86_64 ->
2:1.13.1-44.git584d391.fc27.x86_64
dracut 046-5.fc27.x86_64 -> 046-8.git20180105.fc27.x86_64
dracut-config-generic 046-5.fc27.x86_64 -> 046-8.git20180105.fc27.x86_64
dracut-network 046-5.fc27.x86_64 -> 046-8.git20180105.fc27.x86_64
gdbm 1.13-3.fc27.x86_64 -> 1.14-1.fc27.x86_64
gettext 0.19.8.1-11.fc27.x86_64 -> 0.19.8.1-12.fc27.x86_64
gettext-libs 0.19.8.1-11.fc27.x86_64 -> 0.19.8.1-12.fc27.x86_64
glusterfs 3.12.4-1.fc27.x86_64 -> 3.12.5-1.fc27.x86_64
glusterfs-client-xlators 3.12.4-1.fc27.x86_64 -> 3.12.5-1.fc27.x86_64
glusterfs-fuse 3.12.4-1.fc27.x86_64 -> 3.12.5-1.fc27.x86_64
glusterfs-libs 3.12.4-1.fc27.x86_64 -> 3.12.5-1.fc27.x86_64
initscripts 9.78-1.fc27.x86_64 -> 9.79-1.fc27.x86_64
iproute 4.13.0-1.fc27.x86_64 -> 4.14.1-4.fc27.x86_64
iproute-tc 4.13.0-1.fc27.x86_64 -> 4.14.1-4.fc27.x86_64
kernel 4.14.11-300.fc27.x86_64 -> 4.14.13-300.fc27.x86_64
kernel-core 4.14.11-300.fc27.x86_64 -> 4.14.13-300.fc27.x86_64
kernel-modules 4.14.11-300.fc27.x86_64 -> 4.14.13-300.fc27.x86_64
kmod 24-3.fc27.x86_64 -> 25-1.fc27.x86_64
kmod-libs 24-3.fc27.x86_64 -> 25-1.fc27.x86_64
libpkgconf 1.3.12-1.fc27.x86_64 -> 1.3.12-2.fc27.x86_64
libseccomp 2.3.2-5.fc27.x86_64 -> 2.3.3-1.fc27.x86_64
linux-firmware 20171215-81.git2451bb22.fc27.noarch ->
20171215-82.git2451bb22.fc27.noarch
microcode_ctl 2:2.1-19.fc27.x86_64 -> 2:2.1-20.fc27.x86_64
pcre 8.41-3.fc27.x86_64 -> 8.41-4.fc27.x86_64
pcre2 10.30-3.fc27.x86_64 -> 10.30-5.fc27.x86_64
pigz 2.3.4-3.fc27.x86_64 -> 2.4-1.fc27.x86_64
pkgconf 1.3.12-1.fc27.x86_64 -> 1.3.12-2.fc27.x86_64
pkgconf-m4 1.3.12-1.fc27.noarch -> 1.3.12-2.fc27.noarch
pkgconf-pkg-config 1.3.12-1.fc27.x86_64 -> 1.3.12-2.fc27.x86_64
publicsuffix-list-dafsa 20171028-1.fc27.noarch -> 20171228-1.fc27.noarch
python2 2.7.14-4.fc27.x86_64 -> 2.7.14-5.fc27.x86_64
python2-libs 2.7.14-4.fc27.x86_64 -> 2.7.14-5.fc27.x86_64
runc 2:1.0.0-12.rc4.gitaea4f21.fc27.x86_64 -> 2:1.0.0-15.rc4.gite6516b3.fc27.x86_64
selinux-policy 3.13.1-283.19.fc27.noarch -> 3.13.1-283.21.fc27.noarch
selinux-policy-targeted 3.13.1-283.19.fc27.noarch -> 3.13.1-283.21.fc27.noarch
Added:
ebtables-2.0.10-24.fc27.x86_64
firewalld-0.4.4.5-3.fc27.noarch
firewalld-filesystem-0.4.4.5-3.fc27.noarch
ipset-6.32-1.fc27.x86_64
ipset-libs-6.32-1.fc27.x86_64
python3-firewall-0.4.4.5-3.fc27.noarch
The Vagrant Cloud page with the new atomic host:
https://app.vagrantup.com/fedora/boxes/27-atomic-host
https://app.vagrantup.com/fedora/boxes/27-atomic-host/versions/27.20180117.1
For posterity the AMIs for this release are:
Fedora-Atomic-27-20180117.1.x86_64 EC2 (ap-northeast-1) ami-047b1d62 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (ap-southeast-1) ami-df6a15a3 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (ap-southeast-2) ami-a6b34cc4 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (eu-central-1) ami-88b926e7 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (eu-west-1) ami-9b0a93e2 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (sa-east-1) ami-0e6b2662 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (us-east-1) ami-6a98b410 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (us-west-1) ami-27313347 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (us-west-2) ami-ee952696 hvm standard
Fedora-Atomic-27-20180117.1.x86_64 EC2 (ap-northeast-1) ami-1846207e hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (ap-southeast-1) ami-6666191a hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (ap-southeast-2) ami-bab14ed8 hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (eu-central-1) ami-76b62919 hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (eu-west-1) ami-a8069fd1 hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (sa-east-1) ami-006a276c hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (us-east-1) ami-6593bf1f hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (us-west-1) ami-29323049 hvm gp2
Fedora-Atomic-27-20180117.1.x86_64 EC2 (us-west-2) ami-7c9f2c04 hvm gp2
Dusty
-----BEGIN PGP SIGNATURE-----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=H8YV
-----END PGP SIGNATURE-----