Release 2020_025 (2020-08-17)¶

Impact¶

Multiple service restarts are expected due to changed deep link dependencies caused by security updates.

Add logging syslog and journal to centralized loghosts for improved platform-wide analysis and security (#126523).
Improve map file configuration mechanism for Postfix to more flexibly support different requirements to provide dynamic map data from configs and applications. (#126884)
Prebuild wkhtmltopdf on Hydra to avoid expensive local compilation (#127964).
Improve robustness of fc-userscan, the garbage collection scanner. It doesn’t stop on unreadable files now. Also fix setuid-root invocation: GC roots and cache files are opened with dropped privileges (#124165).
Security updates for
- Python 2.7 (patch against CVE-2019-20907),
- Ruby (2.5.7 -> 2.5.8, 2.6.5 -> 2.6.6),
- libarchive (3.3.3 -> 3.4.2),
- pcre2 (10.32 -> 10.34),
- screen (4.6.2 -> 4.8.0).
Fix Python package overrides in our overlay.
Fix mailstub usage in Vagrant. (#127577)
Disable automatic version checks for Graylog to avoid superfluous alerts.

Add logging syslog and journal to centralized loghosts for improved platform-wide analysis and security (#126523).

Make firewalls more specific to limit NRPE outside access to cross location checks from known addresses. (#124651)
Add logging syslog and journal to centralized loghosts for improved platform-wide analysis and security (#126523).