Release 2018_007 (2018-03-07)

Impact

• [Gentoo] VMs will be rebooted to activate the new kernel.

• [NixOS] Services whose built depends on libarchive or libtiff may be restarted (#28596, #29169).

• [NixOS] Restarts all RabbitMQ servers and takes bit of time (~10-15s) to migrate the on-disk databases (#28725).

NixOS platform

• Security update for RabbitMQ (#28725).

• Collect journal age metrics on Graylog servers (#100350).

• Update libarchive with patches for CVEs as available (#28596).

• Security update libtiff 4.0.8 -> 4.0.9 with a variety of CVEs (#29169).

• Switch default nginx logging format to anonymized logs. See https://blog.flyingcircus.io/2018/02/05/new-default-truncated-ip-addresses-in-nginx-access-logs/ for details (#15440).

Gentoo platform

• Update Linux kernel on to mitigate some Spectre-related problems (#29519).

• Switch default nginx logging format to anonymized logs and remove awstats. See https://blog.flyingcircus.io/2018/02/05/new-default-truncated-ip-addresses-in-nginx-access-logs/ for details (#15440).

• Turn off awstats (#15440).