-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathNEWS
1139 lines (892 loc) · 30 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
7.1.4
-----
📌 Updates
• openssh: Update to version 9.9p2 (fixes CVE-2025-26465 and CVE-2025-26466)
• dnssec-rootkey: Add new rootkey to prepare for rollover
🚀 New Features
• foris-controller-librespeed: Allow to use fixed server by settings in uci
• foris-controller: disable zeroconf via uci option
🐛 Bug Fixes
• reforis-plugin-gsm: actually install it when modem is detected
7.1.3
-----
📌 Updates
• reForis: Update to version 3.2.1
🚀 New Features
• dynfw: Add option to whitelist IP addresses
🐛 Bug Fixes
• updater-fixes: Automatically change manually installed iptables based packages to nftables based variant
7.1.2
-----
📌 Updates
• reForis: Update to version 3.2.0
🐛 Bug Fixes
• miniupnpd: Fix dependencies on firewall
• uboot-tools: More robust handling of U-Boot during update
• user-notify: Adjust notification to to make them less likely to end up in spam
7.1.1
-----
📌 Updates
• reForis LibreSpeed plugin: Update to version 1.2.0
🐛 Bug Fixes
• turris-webapps: More robust handling of json
• libevent2: Reinstall as some changes seems not to be noticed automatically
• sentinel-firewall: Update status message to be better understandable
7.1.0
-----
📌 Updates
• reForis: Major update/cleanup under the hood
💥 Breaking Changes
• Switch to nftables based firewall
7.0.3
-----
📌 Updates
• omnia-uboot: Update to version 2024.10-rc3 for better compatibility with various RAM modules
• omnia-firmware: Update to take advantages of new U-Boot
🚀 New Features
• omnia-5g-kit: Initial support for Turris Omnia 5G Kit
7.0.2
-----
📌 Updates
• knot-resolver: Update to 5.7.4 and 6.0.8 - security updates
🐛 Bug Fixes
• tvheadend: Fix init script and websockets
7.0.1
-----
📌 Updates
• openssh: Update to 9.8p1 (Security update)
• ethtool: Update to 6.6
• iproute2: Update to 6.7.0
• cronie: Update to 1.7.2
• schnapps: Update to 2.13.1 - support for Turris 1.x
🐛 Bug Fixes
• transmission: Downgrade to version 3 as new version seems to have some issues
• modem-manager-autosetup: Proceed with configuration even for unknown service providers
💥 Breaking Changes
• Drop experimental mwifiex-nxp driver (not used anywhere)
7.0.0
-----
💥 Breaking Changes
• Based on the OpenWrt 22.03 release
🚀 New Features
• Dark mode in LuCI
6.5.2
-----
🚀 New Features
• updater: Staged rollouts in stable branch - updates are rolled out over the longer time period
💥 Breaking Changes
• Dropped Netmetr package list as service is no longer operational
📌 Updates
• knot-resolver: Update to 5.7.1 - fixes CVE-2023-50868 and CVE-2023-50387
🐛 Bug Fixes
• foris-controller: Fix Interfaces tab when LTE is being used
6.5.1
-----
📌 Updates
• kernel: Updated to version 5.15.147
🐛 Bug Fixes
• openvpn-client: Fix configuration path and make client work again
6.5.0
-----
🚀 New Features
• pkglist: Add option to update the firmware to the latest version
• kernel: Support for new features in MCU firmware
• kernel: Turris 1.x is now using 5.15 kernel
• ipv6: Little tweaks to the default configuration (does not affect existing networks)
• ipv6: Support pref64 (RFC 8781)
• easycwmp: Improve integration - fix Wi-Fi information and serial number/software version getters
• easybird: Support for simple Bird configuration in LuCI
• knot-resolver6: Preview of Knot Resolver 6 available for testing
• morce: Aggregated notifications and ignore list
📌 Updates
• kernel: Updated to version 5.15.146
• openssh: Updated to version 9.6p1
🐛 Bug Fixes
• modem-manager-autosetup: Detect and don't break 3G setups
• mwan3: Enable configuration by default
• foris-controller-openvpn: Fix configuration when when router is both VPN server and client
• turris-netboot: various fixes and more debugging options
6.4.4
-----
📌 Updates
• curl: update to version 8.4.0
• kernel: update to version 5.10.198 and 5.15.135
• samba: update to version 4.18.8
🐛 Bug Fixes
• Fix startup of web user interface in medkit
• Fix snapshot sizes not showing up in Schnapps
6.4.3
-----
🚀 New Features
• dynfw: New experimental client
• drivers: More packages are automatically installed based on devices present
• drivers: Automatic setup of supported 3/4/5G with PIN-less SIM
📌 Updates
• kernel: update to version 5.10.194 and 5.15.130
• curl: update to version 8.3.0
• openssl: update to version 1.1.1w
• wget: update to version 1.21.4
• php8-pecl-sodium replaced with php8-mod-sodium
• msmtp: update to version 1.8.24
• omnia-mcutool: updated to version 0.2 and packaged firmware
🐛 Bug Fixes
• switch-branch: reinstall all packages when switching between branches
• schnapps: fix regexp for ssh uri
• foris-storage-plugin: explicitly add more dependencies
• resolver-conf: fix calling of script to fill entries from DHCP
• resolver-conf: fix superfluous reloads on some IPv6 networks
6.4.2
-----
🚀 New Features
• Schnapps supports local remote storage (local:// or file://)
• php8-pecl-sodium package backported to better support Nextcloud
📌 Updates
• Linux kernel updated to 5.15.127 (MOX, Omnia) and 5.10.191 (Turris 1.x)
• Samba updated to version 4.18.6
• Knot Resolver updated to version 5.7.0
🐛 Bug Fixes
• gcc: passing correct build options on Turris 1.x
• nextcloud: add php8-pecl-sodium as dependency
• webapps-tvheadend: fix dynamic config file generation
6.4.1
-----
🐛 Bug Fixes
• lighttpd: fix lighttpd configuration on Turris Shield
• sentinel-proxy: spread cert checks/renewals across 12-hour period
6.4.0
-----
🚀 New Features
• Add support for Neoway N75-EA, Quectel EP06 and Sierra Wireless WP7607
• Nextcloud now uses the upstream updating solution which automatically updates it to the last Nextcloud version
📌 Updates
• rainbow: update to 0.1.4, fixes brightness changing over time
• lighttpd: update to 1.4.71, package is now closer to the upstream OpenWrt package
• Linux kernel updated to 5.15.120 (MOX, Omnia) and 5.10.186 (Turris 1.x)
• bind: security update to 9.18.16
6.3.3
-----
🚀 New Features
• schnapps: add update-factory command to update the factory snapshot
• lxc: rely on TLS because GPG support was dropped upstream
🐛 Bug Fixes
• schnapps: better handling of invalid arguments
• Linux kernel: backport fix for random crashes on Turris Omnia
• foris-controller: unify reporting of lease timeout for IPv4 and IPv6
• turris-webapps-tvheadend: fix reverse proxy not correctly routing requests
• rainbow: keep LED intensity across reboots by default
📌 Updates
• Linux kernel updated to 5.15.114 (MOX, Omnia) and 5.10.179 (Turris 1.x)
6.3.2
-----
🚀 New Features
• diagnostics: report files which have been changed compared to the package, but are not meant to be mutable
🐛 Bug Fixes
• foris-controller-librespeed-module: fix reading data_dir from UCI
📌 Updates
• updater-ng: update to 70.2.0
• OpenSSL: fix CVE-2023-464 and CVE-2023-465
6.3.1
-----
🐛 Bug Fixes
• Not requesting LibreSpeed on Turris OS 1.x when Netmetr is enabled
6.3.0
-----
🚀 New Features
• Syncthing and Transmission WebApps now use Turris Auth
• Enabled multiple speed optimizations on Turris Omnia and Turris MOX
• LibreSpeed reForis plugin for measuring network speed replacing Netmetr
🐛 Bug Fixes
• Fixed webfinger support in Nextcloud
• Fixed QoS for guest network
• Notifications now correctly report reboot date at the end of the month
• Hide incompatible packages from reForis on Turris 1.x
📌 Updates
• Linux kernel updated to 5.15.96 (MOX, Omnia) and 5.10.170 (Turris 1.x)
• Nextcloud updated to 24.0.9
• Sentinel Common Passwords updated for Q1 2023
6.2.4
-----
📌 Updates
• BIND updated to 9.18.11 (security update)
• OpenSSL updated to 1.1.1t (security update)
6.2.3
-----
🐛 Bug Fixes
• Fixed reForis LAN page when fetching DHCPv6 lease fails
• Fixed Syncthing dashboard entry design to be more in line with other entries
📌 Updates
• Sentinel Proxy updated to 2.1.0
• Knot Resolver updated to 5.6.0 (security update)
• git updated to 2.34.6 (security update)
• Linux kernel updated to 5.15.89 and 5.10.164
6.2.2
-----
🐛 Bug Fixes
• Fixed USB 3 port on Turris MOX module A
• Fixed SDIO card for Turris MOX
📌 Updates
• Updater-ng updated to version 70.1.0
• RIPE Atlas Software Probe updated to 5080
6.2.1
-----
🐛 Bug Fixes
• Fixed reForis LAN page issue with missing DHCPv6 leases
6.2.0
-----
🚀 New Features
• Redesigned WebApps
• Syncthing integration
📌 Updates
• Linux kernel updated to 5.15.86
• Bind updated to version 9.18.10
6.1.0
-----
💥 Breaking Changes
• Linux kernel on Turris 1.X updated from 5.10 to 5.15
• Nextcloud now uses PHP 8
• PHP 8 doc_root changed to /srv/www
🚀 New Features
• VLAN support for WAN interface in reForis
• Credentials (username, password) support in OpenVPN reForis client
• Improved support for PHP 8
• performance tweaks and added support for lighttpd
🐛 Bug Fixes
• Fixed automatic Nextcloud updates without user approval in the UI
• Fixed Turris Netboot to work with Turris OS 6
• Fixed Rainbow not saving brightness when set with the button
📌 Updates
• Nextcloud updated to 23.0.11
• Snowflake updated to 2.4.1
• Python3 updated to 3.9.16
6.0.4
-----
💥 Breaking Changes
• Dropped packages for old ISDN4Linux
🚀 New Features
• Added 10k passwords from Turris Sentinel to common passwords
• Added packages for LibreSpeed
• Added package Snowflake
• Added firmware package for AsiaRF AW7916-NPD
• Added branch name to automatic snapshots
🐛 Bug Fixes
• Fixed network diagnostics module
• Fixed lighttpd module for rrdtool
• Fixed inaccessible router through hostname when a client didn't send its hostname
• Fixed crashing Sentinel FWLogs
📌 Updates
• Christmas updated to be working with recent LEDs change
• Linux kernel updated to 5.15.82 and 5.10.158
• PHP7 updated to 7.4.33
• PHP8 updated to version 8.0.25
• OpenSSL updated to 1.1.1s
• wolfSSL updated to 5.5.3 (CVE 2022-42905)
• SQLite3 updated to 3.40.0
• cronie updated to 1.6.1
• golang: updated to 1.18.9
6.0.3
-----
🚀 New Features
• Added SFP and OpenVPN modules for diagnostics
📌 Updates
• rainbow updated to version 0.1.3
• syncthing updated to version 1.19.2
• golang updated to version 1.18.8
• Linux kernel updated to 5.15.78 and 5.10.154
📦️ Other Changes
• Switch to performance governor by default
6.0.2
-----
🚀 New Features
• Added SSL variants for zabbix
📌 Updates
• Updater-ng updated to 70.0.2
• Rainbow updated to 0.1.2
• Unbound updated to 1.17.0
• igmpproxy updated to 0.3
• tailscale updated to 1.24.2
• uriparser updated to 0.9.7
🐛 Bug Fixes
• Adjust path for tar in maintain-config-backup script
• Fixed missing icon in reForis menu for Nextcloud plugin
• Fixed collisions in ffmpeg packages
• Fixed collisions in pulseaudio packages
• Fixed collisions between ttyd and mosquitto packages
• Fixed kmod-ipt-nathelper-rtsp package with Linux kernel 5.15
• Fixed initial user creation for Nextcloud
• Fixed Turris Diagnostics webs for Turris Shield
📦️ Other Changes
• Foris backend for old data collection system uCollect was removed
6.0.1
-----
🚀 New Features
• Added standalone snapshots web
📌 Updates
• Python3 updated to 3.9.15
🐛 Bug Fixes
• Fixed link for morce in package lists
• Some packages like wireguard were missing/renamed in upstream
• Provide smooth transition atleast for a few packages
• Fix compatibility script for rainbow
6.0
-----
💥 Breaking Changes
• Based on the latest OpenWrt 21.02.5 release
• LuCI supports L2 and L3 configuration
• LTS kernel 5.15
• Foris removed (use reForis exclusively now)
• Lighttpd uses number prefixes for configuration files to ensure a predictable order
🚀 New Features
• Morce (integrated IDS)
• reForis Nextcloud plugin
• Wi-Fi 6 cards supported
• Turris Auth (login gateway)
• PaKon moved to a separate page
• New LEDs driver for all routers
• Dashboard in LuCI
• NetMetr supports measurement with IPv6 address
• Improved support for Turris 1.x routers
• New Device Tree
• PowerPC SPE utilized – should improve performance
• Knot Resolver by default
🐛 Bug Fixes
• Allow managing interfaces in reForis for Turris 1.x
• Fixed Ethernet ports numbering for Turris MOX in reForis
📌 Updates
• Python version 3.7 ➔ 3.9
• Lighttpd version ➔ 1.4.67
• Nextcloud version ➔ 22.2.10
📦️ Other Changes
• Obsolete SIDN package feed dropped
5.4.4
-----
📌 Updates
• Kernel to version 4.14.294
• Knot Resolver to version 5.5.3 (CVE-2022-40188)
• Unbound to version 1.16.3 (CVE-2022-3204)
• BIND to version 9.16.33 (CVE-2022-2795, CVE-2022-3080, CVE-2022-38177, CVE-2022-38178)
5.4.3
-----
🐛 Bug Fixes
• Fixed permission denied while installing packages
📌 Updates
• Kernel to version 4.14.292
• Knot DNS to version 3.1.7
• Knot Resolver to version 5.5.2
• syslog-ng to version 3.38.1
5.4.2
-----
🐛 Bug Fixes
• Fixed collision with libgd
• Fixed collision with vim
📌 Updates
• Kernel to version 4.14.291
5.4.1
-----
🐛 Bug Fixes
• Fixed Unicode support in BusyBox
• Fixed showing Turris OS versioning mismatch
📌 Updates
• zlib to version 1.2.12
5.4.0
-----
💥 Breaking changes
• PHP update to version 7.4
🚀 New Features
• Timezone in email notifications
🐛 Bug Fixes
• reForis fix session handling when time is wrong
📌 Updates
• Nextcloud to version 21.0.9
• Unbound to version 1.16.2
• Kernel to version 4.14.290
5.3.11
-----
* Updated kernel to version 4.14.287
* Updated Knot Resolver to version 5.5.1
* Updated unbound to version 1.16.1
* Updated syslog-ng to version 3.37.1
* Updated bird2 to version 2.0.10
* Updated bind to version 9.16.30
* Updated wireguard to version 1.0.20220627
* Dropped moonjit in favor of upstream luajit package
* Improvement for switch-branch to prevent downgrades
* Fixed removing directories with local opkg install
* Security fixes
* netatalk
* FFmpeg
* libxml2
* OpenSSL
* beep
5.3.10
-----
* Added Sentinel device token in reForis
* Added PHY drivers for Turris 1.x routers
* Updated USB device database
* Updated RIPE Atlas SW probe
* Updated kernel to version 4.14.280
* Security fixes
* ecdsautils
* postgresql
5.3.9
-----
* Based on the latest OpenWrt 19.07.10
* Added SANE drivers
* Fixed expiration time for static leases in reForis
* Fixed Turris 1.x specific issue regarding interfaces management in reForis
* Updated ffmpeg to version 4.2.6 and added more decoders (fixes CVE-2020-22027)
* Updated BIND to version 9.16.28
* Updated Knot Resolver to version 5.5.0
* Updated kernel to version 4.14.277
* Security fixes
* wolfSSL
* Zabbix
* ruby
5.3.8
-----
* Updated kernel to version 4.14.275
* Multiple fixes for Turris 1.x routers
* Fixed Foris Controller with a single Wi-Fi card
* Force read-write to microSD card slot
* Updated OUI database for MAC addresses
5.3.7
-----
* Updated kernel to version 4.14.274
* Sentinel improvements
* Updated syslog-ng
* Fixed switch-branch and listing versions
* Security fixes
* bind
* OpenSSL
* zlib
* python3
5.3.6
-----
* Based on the latest OpenWrt 19.07.9
* Updated kernel to version 4.14.269
* Updated unbound, fosquitto, foris-forwarder
* Security fixes
* tcpdump
* MbedTLS
* hostapd
* wolfSSL
* expat
5.3.5
-----
* Updated kernel to version 4.14.264
* Updated several packages such as Knot Resolver, nano
* Additional fix for RTC on Turris 1.x routers
* Security fixes
* Prosody
* uriparser
* lighttpd
* ruby
* nss
5.3.4
-----
* Updated kernel to version 4.14.262
* Updated mac80211 to version 4.19.221
* Updated several packages such as zsh, domoticz
* Fixed RTC issue on Turris 1.x routers
* Fixed remote storages in schnapps
* Fixed initial SFP configuration for Turris MOX
* Security fixes
* PostgreSQL
* c-ares
5.3.3
-----
* Fixed network configuration in medkit for Turris Shield
* Updated Knot Resolver
5.3.2
-----
* Various fixes for migration from Turris OS 3.x
* Security fixes
* MariaDB
* icu
* Updated Knot Resolver, Unbound, and others
5.3.1
-----
* reForis
* Several bug fixes
* Updated translations
* Security fixes
* ffmpeg
* Updated Knot Resolver and lighttpd
5.3.0
-----
* Sentinel improvements
* Foris and reForis starts on demand
* Updated Nextcloud
5.2.7
-----
* Updated kernel and fixed mac80211 vulnerability - CVE-2020-3702
* Fixed git vulnerability - CVE-2021-21300
* Fixed BIND vulnerability - CVE-2021-25218
* Fixed tor vulnerabilities - CVE-2021-34548, CVE-2021-34549, and CVE-2021-34550
* Fixed HAProxy vulnerability - CVE-2021-40346
* Security updates for irssi, python3
* Re-add systemd workaround for LXC
5.2.6
-----
* Bring back https-dns-proxy for Turris MOX
* Security fixes
* OpenSSL
* file
* tar
* mc
* apr
5.2.5
-----
* Based on the latest OpenWrt 19.07.8
* Updated kernel to version 4.14.241
5.2.4
-----
* Fixed downloading LXC images
* Security fixes
* Python 3
* Candela Tech (ath10k-ct) drivers
* MariaDB
* Apache2
5.2.3
-----
* Fixed Nextcloud installation in Web UI
* Fixed AppStore in Nextcloud
5.2.2
-----
* reForis
* Add support for more extended Honeypot as a Service token
* Add support in Network Interfaces for Turris 1.x routers
5.2.1
-----
* reForis
* Several bug fixes
* Update translations
* Fixed dhparam generation for some OpenVPN server instances
5.2.0
-----
* New reForis features
* Overview tab
* Storage plugin with option for persistent system logs
* Factory reset from web interface
* Support for Honeypot as a Service (haas.nic.cz)
* Add option to change hostname in reForis
* Fix DHCP range configuration check
* A few design improvements
* WebApps: New graphical design with optional dark mode
* Turris MOX: Update firmware for SDIO card
* Add RIPE Atlas SW probe, common passwords as package lists
* Automatic installation of drivers for limited amount of LTE and DVB devices
5.1.10
-----
* Fixed Python3 vulnerabilities - CVE-2021-3177 and CVE-2021-23336
* Fixed Open vSwitch vulnerability - CVE-2020-35498
* Fixed screen vulnerability - CVE-2021-26937
* Fixed BIND vulnerability - CVE-2020-8625
5.1.9
-----
* Based on the latest OpenWrt 19.07.7
* Updated kernel to version 4.14.221
* Fixed Baron Samedit sudo vulnerability - CVE-2021-3156
* Fixed wolfSSL vulnerabilities - CVE-2021-3336 and CVE-2020-36177
5.1.8
-----
* Minor fixes in logging of dnsmasq
5.1.7
-----
* Based on the latest OpenWrt 19.07.6 version
* Security update for dnsmasq
* Fixes DNS vulnerabilities named DNSpooq
5.1.6
-----
* Fixed possible XSS issue in Foris next query parameter.
* Fixed syslog warning in resolver dynamic domain script.
5.1.5
-----
* Based on the latest OpenWrt 19.07.5 version
* Fix for OpenVPN client when filename has multiple dots or dashes
* Fixed bug in reForis in setting up custom mail server for notifications
* Improvements regarding Data Collection in migration script from Turris OS 3.x
5.1.4
-----
* Update DNS rules based on DNS Flag Day 2020
* Fixed issue in Netboot list while using opt-in migration from Turris OS 3.x
* Several other fixes
5.1.3
-----
* Fixed issue when CA for OpenVPN was not created in some cases
* Make factory reset on Turris Shield easier - long pressing RESET button does factory reset
5.1.2
-----
* Changed priority of port forwarding for data collect firewall to not overrule user's rules.
* Fixed issue with data collect firewall logs collecting in some cases causing high system load
5.1.1
-----
* Based on the latest OpenWrt 19.07.4
* Various security updates
5.1.0
-----
* Introduced new data collection system Sentinel
* reForis (future default web interface)
* Now installed by default
* Added NetMetr, OpenVPN client, and remote devices plugins
* Package lists
* Expanded with labels and additional options
* Added option to select alternative WiFi drivers
* Nextcloud updated to version 18
* Removed old Device Detection based on Suricata
5.0.4
-----
* Guest network on Turris MOX SDIO card is now supported
5.0.3
-----
* Updated WireGuard, Knot Resolver and Nextcloud
* Syslog-ng detect disabled IPv6 on loopback and fallback to IPv4
5.0.2
-----
* Hotfixed OpenSSL on Turris 1.x routers
* Knot Resolver DNSSEC root key is now read only (not periodically updated)
5.0.1
-----
* Improved experimental migration from Turris OS 3.x
* Prevent updates overwrite cron configuration file
* Add possibility to backup public key for RIPE Atlas probe
5.0.0
-----
* Based on latest OpenWrt 19.07 and Linux 4.14
* New features for reForis including remote control and snapshots integration
* Add secondary DNS servers and enable TLS for Google DNS
* Replaced Vixie-cron with cronie
* Webapps: Forward to HTTPS if possible
* Updater: Drop compatibility for releases before v4.0-beta2
* MOX: I2C-1 on GPIO pinheader is now enabled
4.0.6
-----
* updater: fix packages provides and modify virtual packages behavior
* kernel: updated to version 4.14.167
* zerotier: add /etc/config/zerotier as configuration file
* avrdude: fix GPIO path building
* mbedtls: updated to version 2.16.4
Fixes: CVE-2019-18222
* tiff: updated to version 4.1.0
Fixes: CVE-2019-14973, CVE-2019-17546, CVE-2019-7663, CVE-2019-6128
4.0.5
-----
* Based on the latest OpenWrt 18.06.6
* kernel: update to version 4.14.162
* python3: update to version 3.6.10
* wget: fix CVE-2019-5953
* unbound: update to version 1.9.6
* php7: update to version 7.2.26
Fixes: CVE-2019-11044, CVE-2019-11045, CVE-2019-11046, CVE-2019-11047, CVE-2019-11050
* nano: update to version 4.7
* openssl: update to version 1.0.2u
* bird: update to version 1.6.8
* reforis: update to the latest development version, adds openvpn-plugin
* ffmpeg: update to version 4.0.5
Fixes: CVE-2019-12730, CVE-2019-17539, CVE-2019-17542
* e2fsprogs: fix CVE-2019-5094
* christmas: removed from default installation
4.0.4
-----
* Not found
4.0.3
-----
* Merry Christmas!
🔔🔔🔔
* kernel: updated to version 4.14.158
* foris-controller-subordinates-module: limit custom name length
* tvheadend: ensure the first setup works
* libvpx: fix CVE-2019-9232, CVE-2019-9325, CVE-2019-9371, CVE-2019-9433
* git: updated to version 2.16.6, fix multiple CVEs
4.0.2
-----
* Based on the latest OpenWrt 18.06.5
* added missing hardening package list
* fixed autodetection of router address in Foris OpenVPN
* irssi: updated to version 1.2.2, fix CVE-2019-15717
* sudo: updated to version 1.8.28p1, fix CVE-2019-14287
* bind: updated to version 9.11.13, fix CVE-2019-6477
* openldap: updated to version 2.4.48, fix CVE-2019-13565
* kernel: updated to version 4.14.156
* libpcap: updated to version 1.9.1, fix CVE-2019-1516{1,2,3,4,5}
* tcpdump: updated to version 4.9.3, fix multiple CVEs
* python: updated to version 2.7.17
* php7: updated to version 7.2.25, fix CVE-2019-11043, CVE-2019-11042
* mariadb: updated to version 10.4.10, fix CVE-2019-2974, CVE-2019-2938
* foris: updated to version 100.6
* foris-controller: updated to version 1.0.6
* python[3]-cryptography: fix CVE-2018-10903
* ustream-ssl: CVE-2019-5101, CVE-2019-5102
* unbound: updated to version 1.9.5, fix CVE-2019-18934
* haproxy: updated to version 1.8.23, fix CVE-2019-19330
* lxc: fix CVE-2019-5736
* tor: updated to version 4.1.6
* nano: updated to version 4.6
* libiconv: updated to version 1.16
* enable RTC NVMEM access for Turris 1.x
* luci-compat, lmdb: new packages
4.0.1
-----
* include eeprom drive in Omnia medkits (used in some tests)
* fix reForis dependencies
* expat: updated to version 2.2.9, fix CVE-2018-20843, CVE-2019-15903
* python[2,3]: fix CVE-2019-16056, CVE-2019-16935
* libgcrypt: fix CVE-2019-13627
* mosquitto: updated to version 1.5.9, fix CVE-2019-11779
* python-crypto: fix CVE-2013-7459 and CVE-2018-6594
* security fix for Foris translation
* unbound: update to version 1.9.4, fix CVE-2019-16866
* haveged: update to version 1.9.8
* nextcloud: update to version 16.0.5
* nano: update to version 4.5
* python3-pip: fix shebang
4.0
---
* experimental support for multiple drives in storage plugin
* hostapd: fix CVE-2019-16275
* zmq: fix CVE-2019-13132
* django: updated to version 1.8.19, fix CVE-2018-753{6,7}
4.0-beta11
----------
* mariadb: updated to version 10.4.8
4.0-beta10
----------
* haveged: updated to version 1.9.6
* keepalived: update to version 1.4.5, fix CVE-2018-19115
* lighttpd: updated to version 1.4.54, fix CVE-2019-11072
* libarchive: updated to version 3.4.0, multiple CVE fixes
* bind: updated to version 9.11.10, multiple CVE fixes
* dovecot: updated to version 2.2.36.4, fix CVE-2019-7524
* pigeonhole: updated to version 0.4.24.2, fix CVE-2019-11500
* nano: updated to version 4.4
* unbound: updated to version 1.9.3
* nextcloud: updated to version 16.0.4
* bzip2: fix CVE-2019-12900
* wget: fix CVE-2018-20483
* wolfssl: fix CVE-2018-16870, CVE-2019-13628
* iptables: fix CVE-2019-11360
* tar: fix CVE-2018-20482, CVE-2019-9923
* musl: fix CVE-2019-14697
* patch: fix CVE-2019-1363{6,8}
* apinger: updated to the latest git revision
* speedtest-netperf: new package
4.0-beta9
---------
* golang: fix for CVE-2018-1687{3,4,5}, CVE-2019-6486
* squid: update to version 3.5.28
* foris: fix AttributeError password_set
4.0-beta8
---------