On 5/16/19 6:27 PM, noreply(a)fedoraproject.org wrote:
*NOTE* The
getfedora.org download links are not currently working. We are tracking this
in
https://pagure.io/fedora-infrastructure/issue/7802
This release of atomic host is a security fix release for a collection of vulnerabilities
known as MDS. These were mitigated in the new versions of kernel and microcode_ctl that
are
listed in the diff output below. More information on the vulnerabilities can be found by
reading the email from Justin Forbes [1] (Fedora Kernel Developer) and the nice writeup
from
Red Hat [2] on the vulnerabilities.
[1]
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
[2]
https://access.redhat.com/security/vulnerabilities/mds
An example of the diff between this and the previous released version (for x86_64) is:
ostree diff commit old: 575c9ee648a2a8ed9df9695c003c2776d73d7be01f03cd84f7367d5728be1f1c
ostree diff commit new: 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3
Upgraded:
fuse-overlayfs 0.3-8.dev.gita6958ce.fc29 -> 0.3-9.dev.git89bd69b.fc29
glibc 2.28-27.fc29 -> 2.28-30.fc29
glibc-all-langpacks 2.28-27.fc29 -> 2.28-30.fc29
glibc-common 2.28-27.fc29 -> 2.28-30.fc29
kernel 5.0.13-200.fc29 -> 5.0.16-200.fc29
kernel-core 5.0.13-200.fc29 -> 5.0.16-200.fc29
kernel-modules 5.0.13-200.fc29 -> 5.0.16-200.fc29
libmodulemd1 1.8.8-1.fc29 -> 1.8.10-1.fc29
libxcrypt 4.4.4-2.fc29 -> 4.4.6-1.fc29
microcode_ctl 2:2.1-26.fc29 -> 2:2.1-29.fc29
x86_64 AMIs are here:
Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-1 ami-0ccfbc53add4e2601
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-2 ami-0ebbea3c0f7e50f16
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 ap-south-1 ami-02a942754b9aa2f80
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-1 ami-030b20fa3bfdf170f
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-2 ami-06fd5b1246ba3cdda
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 ca-central-1 ami-00d9f360bf9beae15
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 eu-central-1 ami-07b9e127269768545
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-1 ami-0ba5b56aef9f7ef24
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-2 ami-0278476fe7d6bf362
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 sa-east-1 ami-03306f9f2b86c9a05
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 us-east-1 ami-0da9eb89f705d4ab4
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 us-west-1 ami-01e58164c7d7ae5d0
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 us-west-2 ami-0bdc45ba9e2ee5de3
hvm standard
Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-1 ami-0a7fede8400c0f044
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-2 ami-044c20ba4ff735131
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 ap-south-1 ami-053e342ef1f59bc0b
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-1 ami-026f1f7962da66610
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-2 ami-0914b6e3e54e3f308
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 ca-central-1 ami-0565c03e9fe9107de
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 eu-central-1 ami-0737796f3ac6d7e8a
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-1 ami-08f5c818d4d73117a
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-2 ami-0ac9427e3f440b922
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 sa-east-1 ami-04825c00b2d4f672b
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 us-east-1 ami-0b620bba2adb4ec27
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 us-west-1 ami-0d26e491e944a0912
hvm gp2
Fedora-AtomicHost-29-20190516.0.x86_64 us-west-2 ami-08b4ff3ac125f8800
hvm gp2
aarch64 AMIs are here:
Fedora-AtomicHost-29-20190516.0.aarch64 eu-west-1 ami-01f7e29aa0e9f572e
hvm gp2
Fedora-AtomicHost-29-20190516.0.aarch64 us-east-1 ami-0a4003c8ae5150c7c
hvm gp2
Fedora-AtomicHost-29-20190516.0.aarch64 us-west-2 ami-09c83be4be7b9c135
hvm gp2
The Vagrant Cloud page with the new Atomic Host:
https://app.vagrantup.com/fedora/boxes/29-atomic-host
https://app.vagrantup.com/fedora/boxes/29-atomic-host/versions/29.20190516.0
Thanks,
Fedora Atomic Working Group