Release 2018_006 (2018-02-27)#

Impact#

  • [NixOS] Various services that link against OpenSSL will be restarted.

  • [NixOS] OpenSSH servers will be restarted.

  • [NixOS] OpenSSH has widely updated their cryptographic policies and disabled various (very) outdated protocols like SSHv1. For details check https://www.openssh.com/releasenotes.html for incompatible changes between version 6.9 and 7.5.

  • [NixOS] InfluxDB services will be restarted.

  • [Gentoo] Apache services will be restarted.

NixOS platform#

  • Enable installation of strongSwan 5.6 IPSec server (assistance from support needed) (#29822).

  • Fix Sensu API authentication.

  • Security update OpenSSL: -> 1.0.1g, -> 1.0.2n (#29247).

  • Update OpenSSH: 6.9 -> 7.5 (#29247).

  • Update for cmake due to NixOS 17.09 compatibility issues.

  • Configure InfluxDBs’ systemd unit to automatically restart after crashes.

  • Improve outside connectivity check to reduce false positives.

Gentoo platform#

  • Use copytruncate for logrotate on MySQL (#29764).

  • Security update for Apache 2.4 (GLSA 201701-36; GLSA 201710-32; #25501; #28953)