docs-commits July 2017

docs-commits@lists.fedoraproject.org

1 participants
15 discussions

[release-notes] 02/02: Add issue 36 - OpenVPN

by git repository hosting

This is an automated email from the git hooks/post-receive script. pbokoc pushed a commit to branch f26 in repository release-notes. commit 76126e8d5d33c3c4a90c82e87e7286a95e75cf44 Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Jul 10 15:47:52 2017 +0200 Add issue 36 - OpenVPN --- en-US/Networking.xml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/en-US/Networking.xml b/en-US/Networking.xml index 9fdc23a..e770827 100644 --- a/en-US/Networking.xml +++ b/en-US/Networking.xml @@ -7,4 +7,23 @@ <section id="sect-networking"> <title>Networking</title> <para /> + <section id="sect-networking-openvpn"> + <title>OpenVPN Rebased to Version 2.4.3</title> + <para> + <application>OpenVPN</application> has been rebased to version 2.4.3. This update adds many improvements, notably improved elliptic curve cryptography support (<systemitem>ECDH</systemitem>), support for <systemitem>AES-GCM</systemitem>, and additional encryption layer of the control channel (the <option>--tls-crypt</option> option), and a type of cipher negotiation which allows for gradually upgrading client ciphers to stronger ones without significant added complexity. Additional [...] + </para> + <para> + For a full list of changes in this version, see the <ulink url="https://github.com/OpenVPN/openvpn/blob/v2.4.3/Changes.rst">upstream changelog on GitHub</ulink>. + </para> + <para> + Overall integration with <application>systemd</application> has also improved, and systemd can now better manage OpenVPN processes. This update ships with brand new systemd unit files, which add additional security hardening. These new unit files are preferred over the old <filename>openvpn@.service</filename> file. The same unit files are used in other Linux distributions which use systemd, ensuring a more consistent behavior and usage between different systemd-based systems. See [...] + </para> + <bridgehead renderas="sect3">Additional Notes</bridgehead> + <para> + In other changes, Certificate Revocation List (<systemitem>CRL</systemitem>) checking is now done by <command>SSL</command> libraries directly. These libraries have a far more strict acceptance policy than the approach previously used in OpenVPN. For example, if your CRL file has expired, this will have an impact on every user, regardless of whether their certificates are revoked or not. + </para> + <para> + Additionally, OpenVPN in Fedora 26 currently use the <package>compat-openssl10</package> and <package>compat-openssl10-pkcs11-helper</package> compatibility packages, which are considered to be a workaround until more thorough testing can be done on OpenSSL 1.1, which has only been introduced in OpenVPN recently. In a later update, the OpenVPN package is expected to be upgraded to make use of the newer <package>openssl-1.1</package> library. + </para> + </section> </section> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

6 years, 9 months

1
0
0 / 0

[release-notes] 01/02: Add installer relnotes

by git repository hosting

This is an automated email from the git hooks/post-receive script. pbokoc pushed a commit to branch f26 in repository release-notes. commit 77c4d622f840363c95dab1d7d4b98a497c3adbed Author: Petr Bokoc <pbokoc(a)redhat.com> Date: Mon Jul 10 13:34:54 2017 +0200 Add installer relnotes --- en-US/Installation.xml | 126 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 126 insertions(+) diff --git a/en-US/Installation.xml b/en-US/Installation.xml index a29b4dd..6ec2859 100644 --- a/en-US/Installation.xml +++ b/en-US/Installation.xml @@ -6,6 +6,131 @@ <section id="sect-installation"> <title>Installation</title> + + <section id="sect-installation-anaconda"> + <title>Anaconda Changes</title> + <para> + This section covers changes in the <application>Anaconda</application> installer, including changes in the graphical and text mode interactive installers, Kickstart, and installer boot options. + </para> + <section id="sect-installation-anaconda-gui"> + <title>Changes in the Graphical Interface</title> + <itemizedlist> + <listitem> + <para> + A new, alternate partitioning interface provided by the the <application>blivet-gui</application> tool is now available in the manual partitioning sceeen. Unlike the existing partitioning interface, <application>blivet-gui</application> allows you to configure partitioning from the "bottom up": for example, in case of LVM you first create physical volumes, then a volume group, and then logical volumes, while in the old interface, you start with logical volumes and everything [...] + </para> + <para> + The previous partitioning interface continues to be available as alongside the new one. For additional information, see the <ulink url="https://fedoraproject.org/wiki/Changes/AnacondaBlivetGUI">Fedora Project Wiki</ulink>. + </para> + </listitem> + <listitem> + <para> + The installer now shows more detailed indication of current progress during all phases of the installation. + </para> + </listitem> + </itemizedlist> + </section> + <section id="sect-installation-anaconda-tui"> + <title>Changes in the Text Mode Interface</title> + <itemizedlist> + <listitem> + <para> + The text mode interface now supports setting up IP over Inifiniband IPoIB connections in the Networking screen. + </para> + </listitem> + <listitem> + <para> + The built-in help system, which was previously available in the graphical installation interface, has been extended to the text mode interface. + </para> + </listitem> + <listitem> + <para> + The <application>Initial Setup</application> post-setup text mode interface now runs on all available consoles. + </para> + </listitem> + </itemizedlist> + </section> + <section id="sect-installation-kickstart"> + <title>Kickstart Changes</title> + <itemizedlist> + <listitem> + <para> + A new command, <command>snapshot</command>, has been added to provide LVM snapshot support for devices in an LVM thin pool. The command has the following syntax: + </para> + <screen>snapshot --name <replaceable>snapshot_name</replaceable> --when [post-install|pre-install] +</screen> + <para> + Available options are: + </para> + <itemizedlist> + <listitem> + <para> + <option>--name=</option> - provide a name for the snapshot. + </para> + </listitem> + <listitem> + <para> + <option>--when=</option> - controls when the snapshot will be created. Use <literal>pre-install</literal> to create the snapshot before the installation begins, but after commands in the <command>%pre</command> part of the Kickstart are executed, or use <literal>post-install</literal> to create the snapshot after the installation and after commands in the <command>%post</command> part of the Kickstart are executed. + </para> + </listitem> + </itemizedlist> + </listitem> + <listitem> + <para> + Three new options are now available for the <command>autopart</command> command: + </para> + <itemizedlist> + <listitem> + <para> + <option>--nohome</option> - do not create a separate <filename>/home</filename> partition or volume if one would be created under partitioning rules + </para> + </listitem> + <listitem> + <para> + <option>--noboot</option> - do not create a separate <filename>/boot</filename> partition or volume + </para> + </listitem> + <listitem> + <para> + <option>--noswap</option> - do not create any swap space + </para> + </listitem> + </itemizedlist> + </listitem> + </itemizedlist> + </section> + <section id="sect-installation-anaconda-boot-options"> + <title>Changes in Anaconda Boot Options</title> + <itemizedlist> + <listitem> + <para> + The <option>inst.waitfornet=</option> boot options is now available. Use it to force the installer to wait for network connectivity before starting the installer interface for a specified number of seconds - for example, <option>inst.waitfornet=30</option> to wait 30 seconds. + </para> + </listitem> + <listitem> + <para> + A new option named <option>inst.ksstrict</option> is available. You can use it during a Kickstart-based installation to treat Kickstart warnings and error, meaning they will be printed on the output and the installation will terminate. Without specifying this option, warnings are printed to the log and the installation proceeds. + </para> + </listitem> + </itemizedlist> + </section> + <section id="sect-installation-anaconda-other"> + <title>Other Anaconda Changes</title> + <itemizedlist> + <listitem> + <para> + Driver Update Disks can now be loaded from local disk devices. + </para> + </listitem> + <listitem> + <para> + <literal>Installclass</literal> can now modify rules for storage checks and their constraints. + </para> + </listitem> + </itemizedlist> + </section> + </section> + <section id="sect-installation-fmw"> <title>ARM Support in Fedora Media Writer</title> <para>Fedora Media Writer has gained the ability to write ARM images to SD @@ -27,4 +152,5 @@ DNF 2.0 provides usability improvements, including better messages during resolution errors, showing whether a package was installed as a weak dependency, better handling of obsolete packages, fewer tracebacks, and others. </para> </section> + </section> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

6 years, 9 months

1
0
0 / 0

[release-notes] 01/01: zend3

by git repository hosting

This is an automated email from the git hooks/post-receive script. immanetize pushed a commit to branch f26 in repository release-notes. commit ab160f731612f2f3efa4be951cf8875286322330 Author: Pete Travis <immanetize(a)fedoraproject.org> Date: Fri Jun 30 21:41:46 2017 -0500 zend3 --- en-US/Development_Web.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/en-US/Development_Web.xml b/en-US/Development_Web.xml index 90fdfbf..f41d55a 100644 --- a/en-US/Development_Web.xml +++ b/en-US/Development_Web.xml @@ -18,4 +18,10 @@ <member><ulink url="https://raw.githubusercontent.com/php/php-src/PHP-7.1/UPGRADING.INTERNALS" /></member> </simplelist> </section> + <section id="webdev_zend"> + <title>Zend Framework 3.0</title> + <para> + Fedora 26 offers the latest version 3 of the popular PHP framework, <systemitem>Zend</systemitem>. Zend 3 offers increased performance, support for PHP 7, improved <ulink url="https://docs.zendframework.com/">project documentation</ulink>, and more. For detailed information, refer to the upstream release announcement at <ulink url="https://framework.zend.com/blog/2016-06-28-zend-framework-3.html" /> or their <ulink url="https://docs.zendframework.com/tutorials/migration/to-v3/ove [...] + </para> + </section> </section> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

6 years, 10 months

1
0
0 / 0

[release-notes] 01/01: php 7.1 is here

by git repository hosting

This is an automated email from the git hooks/post-receive script. immanetize pushed a commit to branch f26 in repository release-notes. commit 7e3cdd8317b40913ea7d096c719389b2f4d48c55 Author: Pete Travis <immanetize(a)fedoraproject.org> Date: Fri Jun 30 21:08:51 2017 -0500 php 7.1 is here --- en-US/Development_Web.xml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/en-US/Development_Web.xml b/en-US/Development_Web.xml index 714aa61..90fdfbf 100644 --- a/en-US/Development_Web.xml +++ b/en-US/Development_Web.xml @@ -6,5 +6,16 @@ <section id="sect-web-development"> <title>Web Development</title> - <para /> + <section id="webdev_php"> + <title>PHP 7.1</title> + <para> + The popular web development language <systemitem>PHP</systemitem> has been upgraded from 7.0 to 7.1 for Fedora 26. Pacakges providing extensions to PHP have been rebuilt to use the new release; developers using extensions from non-packaged sources should update them. While most common PHP + applications should be able to use the new release without issue, impacted developers should review the links below for information provided by upstream PHP about the upgrade. + </para> + <simplelist> + <member><ulink url="http://php.net/manual/en/migration71.php" /></member> + <member><ulink url="https://raw.githubusercontent.com/php/php-src/PHP-7.1/UPGRADING" /></member> + <member><ulink url="https://raw.githubusercontent.com/php/php-src/PHP-7.1/UPGRADING.INTERNALS" /></member> + </simplelist> + </section> </section> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

6 years, 10 months

1
0
0 / 0

[release-notes] 01/01: Java system wide crypto

by git repository hosting

This is an automated email from the git hooks/post-receive script. immanetize pushed a commit to branch f26 in repository release-notes. commit ad11dcdc8ee202074c88c25b951e1d0797acbad5 Author: Pete Travis <immanetize(a)fedoraproject.org> Date: Fri Jun 30 19:01:17 2017 -0500 Java system wide crypto --- en-US/Security.xml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/en-US/Security.xml b/en-US/Security.xml index e149478..770af8d 100644 --- a/en-US/Security.xml +++ b/en-US/Security.xml @@ -23,13 +23,22 @@ With Fedora 26, two more things will use the system-wide crypto policy, <systemitem>OpenSSH</systemitem> and <systemitem>Java</systemitem>. </para> <formalpara> - <title>OpenSSH Crypt</title> + <title>OpenSSH Crypto</title> <para> OpenSSH clients will use system preferred key exchange algorithms, encryption ciphers, and message authentication code (MAC) algorithms. This is enabled by an <literal>Include</literal> directive in <filename>/etc/ssh/ssh_config</filename> to include directives in <filename>/etc/ssh/ssh_config.d/*.conf</filename>, which pulls in <filename>/etc/crypto-policies/back-ends/openssh.config</filename>. </para> </formalpara> + <formalpara> + <title>Java Crypto</title> + <para> + OpenJDK has been modified to read additional security properties from the generated crypto policies file at <filename>/etc/crypto-policies/back-ends/java.config</filename> + </para> + </formalpara> + <para> + This change may affect connections to legacy systems that do not support more strict crypto policies. While it is possible to switch the system profile from DEFAULT to LEGACY, or to set <literal>security.useSystemPropertiesFile=false</literal> in a project's <filename>java.security</filename> file (refer to <ulink url="https://docs.oracle.com/javase/8/docs/technotes/guides/security/PolicyFil..." />), it would be best to also update legacy applications to modern security standards. + </para> </section> </section> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

6 years, 10 months

1
0
0 / 0

← Newer
1
2
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

docs-commits July 2017