mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-10-26 08:41:46 +01:00
release-notes: update with 1.2.6 and 1.2.6-S1 release
This commit is contained in:
Christian Poessinger
parent
6fdbdf1f4a
commit
faf357fc1f
@ -4,39 +4,156 @@
|
||||
Release Notes
|
||||
#############
|
||||
|
||||
1.2 (Crux)
|
||||
==========
|
||||
******************
|
||||
Version 1.2 - Crux
|
||||
******************
|
||||
|
||||
1.2.6-S1
|
||||
========
|
||||
|
||||
1.2.6-S1 is a security release release made in September 2020.
|
||||
|
||||
Resolved issues
|
||||
---------------
|
||||
|
||||
VyOS 1.2.6 release was found to be suspectible to CVE-2020-10995. It's a low-
|
||||
impact vulnerability in the PowerDNS recursor that allows an attacker to cause
|
||||
performance degradation via a specially crafted authoritative DNS server reply.
|
||||
|
||||
* :vytask:`2899` remote syslog server migration error on update
|
||||
|
||||
1.2.6
|
||||
=====
|
||||
|
||||
1.2.6 is a maintenance release made in September 2020.
|
||||
|
||||
Resolved issues
|
||||
---------------
|
||||
|
||||
* :vytask:`103` DHCP server prepends shared network name to hostnames
|
||||
* :vytask:`125` Missing PPPoE interfaces in l2tp configuration
|
||||
* :vytask:`1194` cronjob is being setup even if not saved
|
||||
* :vytask:`1205` module pcspkr missing
|
||||
* :vytask:`1219` Redundant active-active configuration, asymmetric routing and
|
||||
conntrack-sync cache
|
||||
* :vytask:`1220` Show transceiver information from plugin modules, e.g SFP+,
|
||||
QSFP
|
||||
* :vytask:`1221` BGP - Default route injection is not processed by the specific
|
||||
route-map
|
||||
* :vytask:`1241` Remove of policy route throws CLI error
|
||||
* :vytask:`1291` Under certain conditions the VTI will stay forever down
|
||||
* :vytask:`1463` Missing command `show ip bgp scan` appears in command
|
||||
completion
|
||||
* :vytask:`1575` `show snmp mib ifmib` crashes with IndexError
|
||||
* :vytask:`1699` Default net.ipv6.route.max_size 32768 is too low
|
||||
* :vytask:`1729` PIM (Protocol Independent Multicast) implementation
|
||||
* :vytask:`1901` Semicolon in values is interpreted as a part of the shell
|
||||
command by validators
|
||||
* :vytask:`1934` Change default hostname when deploy from OVA without params.
|
||||
* :vytask:`1938` syslog doesn't start automatically
|
||||
* :vytask:`1949` Multihop IPv6 BFD is unconfigurable
|
||||
* :vytask:`1953` DDNS service name validation rejects valid service names
|
||||
* :vytask:`1956` PPPoE server: support PADO-delay
|
||||
* :vytask:`1973` Allow route-map to match on BGP local preference value
|
||||
* :vytask:`1974` Allow route-map to set administrative distance
|
||||
* :vytask:`1982` Increase rotation for atop.acct
|
||||
* :vytask:`1983` Expose route-map when BGP routes are programmed in to FIB
|
||||
* :vytask:`1985` pppoe: Enable ipv6 modules without configured ipv6 pools
|
||||
* :vytask:`2000` strongSwan does not install routes to table 220 in certain
|
||||
cases
|
||||
* :vytask:`2021` OSPFv3 doesn't support decimal area syntax
|
||||
* :vytask:`2062` Wrong dhcp-server static route subnet bytes
|
||||
* :vytask:`2091` swanctl.conf file is not generated properly is more than one
|
||||
IPsec profile is used
|
||||
* :vytask:`2131` Improve syslog remote host CLI definition
|
||||
* :vytask:`2224` Update Linux Kernel to v4.19.114
|
||||
* :vytask:`2286` IPoE server vulnerability
|
||||
* :vytask:`2303` Unable to delete the image version that came from OVA
|
||||
* :vytask:`2305` Add release name to "show version" command
|
||||
* :vytask:`2311` Statically configured name servers may not take precedence
|
||||
over ones from DHCP
|
||||
* :vytask:`2327` Unable to create syslog server entry with different port
|
||||
* :vytask:`2332` Backport node option for a syslog server
|
||||
* :vytask:`2342` Bridge l2tpv3 + ethX errors
|
||||
* :vytask:`2344` PPPoE server client static IP assignment silently fails
|
||||
* :vytask:`2385` salt-minion: improve completion helpers
|
||||
* :vytask:`2389` BGP community-list unknown command
|
||||
* :vytask:`2398` op-mode "dhcp client leases interface" completion helper
|
||||
misses interfaces
|
||||
* :vytask:`2402` Live ISO should warn when configuring that changes won't
|
||||
persist
|
||||
* :vytask:`2443` NHRP: Add debugging information to syslog
|
||||
* :vytask:`2448` `monitor protocol bgp` subcommands fail with 'command
|
||||
incomplete'
|
||||
* :vytask:`2458` Update FRR to 7.3.1
|
||||
* :vytask:`2476` Bond member description change leads to network outage
|
||||
* :vytask:`2478` login radius: use NAS-IP-Address if defined source address
|
||||
* :vytask:`2482` Update PowerDNS recursor to 4.3.1 for CVE-2020-10995
|
||||
* :vytask:`2517` vyos-container: link_filter: No such file or directory
|
||||
* :vytask:`2526` Wake-On-Lan CLI implementation
|
||||
* :vytask:`2528` "update dns dynamic" throws FileNotFoundError excepton
|
||||
* :vytask:`2536` "show log dns forwarding" still refers to dnsmasq
|
||||
* :vytask:`2538` Update Intel NIC drivers to recent release (preparation for
|
||||
Kernel >=5.4)
|
||||
* :vytask:`2545` Show physical device offloading capabilities for specified
|
||||
ethernet interface
|
||||
* :vytask:`2563` Wrong interface binding for Dell VEP 1445
|
||||
* :vytask:`2605` SNMP service is not disabled by default
|
||||
* :vytask:`2625` Provide generic Library for package builds
|
||||
* :vytask:`2686` FRR: BGP: large-community configuration is not applied
|
||||
properly after upgrading FRR to 7.3.x series
|
||||
* :vytask:`2701` `vpn ipsec pfs enable` doesn't work with IKE groups
|
||||
* :vytask:`2728` Protocol option ignored for IPSec peers in transport mode
|
||||
* :vytask:`2734` WireGuard: fwmark CLI definition is inconsistent
|
||||
* :vytask:`2757` "show system image version" contains additional new-line
|
||||
character breaking output
|
||||
* :vytask:`2797` Update Linux Kernel to v4.19.139
|
||||
* :vytask:`2822` Update Linux Kernel to v4.19.141
|
||||
* :vytask:`2829` PPPoE server: mppe setting is implemented as node instead of
|
||||
leafNode
|
||||
* :vytask:`2831` Update Linux Kernel to v4.19.142
|
||||
* :vytask:`2852` rename dynamic dns interface breaks ddclient.cache permissions
|
||||
* :vytask:`2853` Intel QAT acceleration does not work
|
||||
|
||||
1.2.5
|
||||
-----
|
||||
=====
|
||||
|
||||
1.2.5 is a maintenance release made in April 2020.
|
||||
|
||||
Resolved issues
|
||||
^^^^^^^^^^^^^^^
|
||||
---------------
|
||||
|
||||
* :vytask:`1020` OSPF Stops distributing default route after a while
|
||||
* :vytask:`1228` pppoe default-route force option not working (Rel 1.2.0-rc11)
|
||||
* :vytask:`1301` bgp peer-groups don't work when "no-ipv4-unicast" is enabled.
|
||||
* :vytask:`1341` Adding rate-limiter for pppoe server users
|
||||
* :vytask:`1376` Incorrect DHCP lease counting
|
||||
* :vytask:`1392` Large firewall rulesets cause the system to lose configuration and crash at startup
|
||||
* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with each other
|
||||
* :vytask:`1392` Large firewall rulesets cause the system to lose configuration
|
||||
and crash at startup
|
||||
* :vytask:`1416` 2 dhcp server run in failover mode can't sync hostname with
|
||||
each other
|
||||
* :vytask:`1452` accel-pppoe - add vendor option to shaper
|
||||
* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 -> 1.2.1
|
||||
* :vytask:`1490` BGP configuration (is lost|not applied) when updating 1.1.8 ->
|
||||
1.2.1
|
||||
* :vytask:`1780` Adding ipsec ike closeaction
|
||||
* :vytask:`1803` Unbind NTP while it's not requested...
|
||||
* :vytask:`1821` "authentication mode radius" has no effect for PPPoE server
|
||||
* :vytask:`1827` Increase default gc_thresh
|
||||
* :vytask:`1828` Missing completion helper for "set system syslog host 192.0.2.1 facility all protocol"
|
||||
* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to existing package
|
||||
* :vytask:`1828` Missing completion helper for "set system syslog host
|
||||
192.0.2.1 facility all protocol"
|
||||
* :vytask:`1832` radvd adding feature DNSSL branch.example.com example.com to
|
||||
existing package
|
||||
* :vytask:`1837` PPPoE unrecognized option 'replacedefaultroute'
|
||||
* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to destroy the running config.
|
||||
* :vytask:`1851` wireguard - changing the pubkey on an existing peer seems to
|
||||
destroy the running config.
|
||||
* :vytask:`1858` l2tp: Delete depricated outside-nexthop and add gateway-address
|
||||
* :vytask:`1864` Lower IPSec DPD timeout lower limit from 10s -> 2s
|
||||
* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and validators
|
||||
* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at commit time
|
||||
* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding stop-script
|
||||
* :vytask:`1879` Extend Dynamic DNS XML definition value help strings and
|
||||
validators
|
||||
* :vytask:`1881` Execute permissions are removed from custom SNMP scripts at
|
||||
commit time
|
||||
* :vytask:`1884` Keeping VRRP transition-script native behaviour and adding
|
||||
stop-script
|
||||
* :vytask:`1891` Router announcements broken on boot
|
||||
* :vytask:`1900` Enable SNMP for VRRP.
|
||||
* :vytask:`1902` Add redistribute non main table in bgp
|
||||
@ -47,7 +164,8 @@ Resolved issues
|
||||
* :vytask:`1934` Change default hostname when deploy from OVA without params.
|
||||
* :vytask:`1935` NIC identification and usage problem in Hyper-V environments
|
||||
* :vytask:`1936` pppoe-server CLI control features
|
||||
* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit fails
|
||||
* :vytask:`1964` SNMP Script-extensions allows names with spaces, but commit
|
||||
fails
|
||||
* :vytask:`1967` BGP parameter "enforce-first-as" does not work anymore
|
||||
* :vytask:`1970` Correct adding interfaces on boot
|
||||
* :vytask:`1971` Missing modules in initrd.img for PXE boot
|
||||
@ -70,30 +188,35 @@ Resolved issues
|
||||
|
||||
|
||||
1.2.4
|
||||
-----
|
||||
=====
|
||||
|
||||
1.2.4 is a maintenance release made in December 2019.
|
||||
|
||||
Resolved issues
|
||||
^^^^^^^^^^^^^^^
|
||||
---------------
|
||||
|
||||
* :vytask:`T258` Can not configure wan load-balancing on vyos-1.2
|
||||
* :vytask:`T818` SNMP v3 - remove required engineid from user node
|
||||
* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4)
|
||||
* :vytask:`T1030` Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare
|
||||
API v4)
|
||||
* :vytask:`T1183` BFD Support via FRR
|
||||
* :vytask:`T1299` Allow SNMPd to be extended with custom scripts
|
||||
* :vytask:`T1351` accel-pppoe adding CIDR based IP pool option
|
||||
* :vytask:`T1391` In route-map set community additive
|
||||
* :vytask:`T1394` syslog systemd and host_name.py race condition
|
||||
* :vytask:`T1401` Copying files with the FTP protocol fails if the password contains special characters
|
||||
* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes to fix
|
||||
* :vytask:`T1401` Copying files with the FTP protocol fails if the password
|
||||
contains special characters
|
||||
* :vytask:`T1421` OpenVPN client push-route stopped working, needs added quotes
|
||||
to fix
|
||||
* :vytask:`T1430` Add options for custom DHCP client-id and hostname
|
||||
* :vytask:`T1447` Python subprocess called without import in host_name.py
|
||||
* :vytask:`T1470` improve output of "show dhcpv6 server leases"
|
||||
* :vytask:`T1485` Enable 'AdvIntervalOpt' option in for radvd.conf
|
||||
* :vytask:`T1496` Separate rolling release and LTS kernel builds
|
||||
* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents load balancing from starting
|
||||
* :vytask:`T1568` strip-private command improvement for additional masking of IPv6 and MAC address
|
||||
* :vytask:`T1560` "set load-balancing wan rule 0" causes segfault and prevents
|
||||
load balancing from starting
|
||||
* :vytask:`T1568` strip-private command improvement for additional masking of
|
||||
IPv6 and MAC address
|
||||
* :vytask:`T1578` completion offers "show table", but show table does not exist
|
||||
* :vytask:`T1593` Support ip6gre
|
||||
* :vytask:`T1597` /usr/sbin/rsyslogd after deleting "system syslog"
|
||||
@ -106,29 +229,35 @@ Resolved issues
|
||||
* :vytask:`T1708` Update Rolling Release Kernel to 4.19.76
|
||||
* :vytask:`T1709` Update WireGuard to 0.0.20190913
|
||||
* :vytask:`T1716` Update Intel NIC drivers to recent versions
|
||||
* :vytask:`T1726` Update Linux Firmware binaries to a more recent version 2019-03-14 -> 2019-10-07
|
||||
* :vytask:`T1726` Update Linux Firmware binaries to a more recent version
|
||||
2019-03-14 -> 2019-10-07
|
||||
* :vytask:`T1728` Update Linux Kernel to 4.19.79
|
||||
* :vytask:`T1737` SNMP tab completion missing
|
||||
* :vytask:`T1738` Copy SNMP configuration from node to node raises exception
|
||||
* :vytask:`T1740` Broken OSPFv2 virtual-link authentication
|
||||
* :vytask:`T1742` NHRP unable to commit.
|
||||
* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must be greater or equal to the range start address y!" when static mapping has same IP as range stop
|
||||
* :vytask:`T1745` dhcp-server commit fails with "DHCP range stop address x must
|
||||
be greater or equal to the range start address y!" when static mapping has
|
||||
same IP as range stop
|
||||
* :vytask:`T1749` numeric validator doesn't support multiple ranges
|
||||
* :vytask:`T1769` Remove complex SNMPv3 Transport Security Model (TSM)
|
||||
* :vytask:`T1772` <regex> constraints in XML are partially broken
|
||||
* :vytask:`T1778` Kilobits/Megabits difference in configuration Vyos/FRR
|
||||
* :vytask:`T1780` Adding ipsec ike closeaction
|
||||
* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py implementation
|
||||
* :vytask:`T1786` disable-dhcp-nameservers is missed in current host_name.py
|
||||
implementation
|
||||
* :vytask:`T1788` Intel QAT (QuickAssist Technology ) implementation
|
||||
* :vytask:`T1792` Update WireGuard to Debian release 0.0.20191012-1
|
||||
* :vytask:`T1800` Update Linux Kernel to v4.19.84
|
||||
* :vytask:`T1809` Wireless: SSID scan does not work in AP mode
|
||||
* :vytask:`T1811` Upgrade from 1.1.8: Config file migration failed: module=l2tp
|
||||
* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3 -> 1.2-rolling
|
||||
* :vytask:`T1812` DHCP: hostnames of clients not resolving after update v1.2.3
|
||||
-> 1.2-rolling
|
||||
* :vytask:`T1819` Reboot kills SNMPv3 configuration
|
||||
* :vytask:`T1822` Priority inversion wireless interface dhcpv6
|
||||
* :vytask:`T1825` Improve DHCP configuration error message
|
||||
* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create an xml
|
||||
* :vytask:`T1836` import-conf-mode-commands in vyos-1x/scripts fails to create
|
||||
an XML
|
||||
* :vytask:`T1839` LLDP shows "VyOS unknown" instead of "VyOS"
|
||||
* :vytask:`T1841` PPP ipv6-up.d direcotry missing
|
||||
* :vytask:`T1893` igmp-proxy: Do not allow adding unknown interface
|
||||
@ -137,12 +266,12 @@ Resolved issues
|
||||
|
||||
|
||||
1.2.3
|
||||
-----
|
||||
=====
|
||||
|
||||
1.2.3 is a maintenance and feature backport release made in September 2019.
|
||||
|
||||
New features
|
||||
^^^^^^^^^^^^
|
||||
------------
|
||||
|
||||
* HTTP API
|
||||
* :vytask:`T1524` "set service dns forwarding allow-from <IPv4 net|IPv6 net>"
|
||||
@ -154,7 +283,7 @@ New features
|
||||
multiqueue
|
||||
|
||||
Resolved issues
|
||||
^^^^^^^^^^^^^^^
|
||||
---------------
|
||||
|
||||
* :vytask:`T1209` OSPF max-metric values over 100 no longer causes commit
|
||||
errors
|
||||
@ -194,18 +323,18 @@ Resolved issues
|
||||
improvements in name servers and hosts configuration handling
|
||||
|
||||
Internals
|
||||
^^^^^^^^^
|
||||
---------
|
||||
|
||||
``/etc/resolv.conf`` and ``/etc/hosts`` files are now managed by the
|
||||
*vyos-hostsd* service that listens on a ZMQ socket for update messages.
|
||||
|
||||
1.2.2
|
||||
-----
|
||||
=====
|
||||
|
||||
1.2.2 is a maintenance release made in July 2019.
|
||||
|
||||
New features
|
||||
^^^^^^^^^^^^
|
||||
------------
|
||||
|
||||
* Options for per-interface MSS clamping.
|
||||
* BGP extended next-hop capability
|
||||
@ -220,7 +349,7 @@ New features
|
||||
* A script for querying values from config files
|
||||
|
||||
Resolved issues
|
||||
^^^^^^^^^^^^^^^
|
||||
---------------
|
||||
|
||||
* Linux kernel 4.19.54, including a fix for the TCP SACK vulnerability
|
||||
* :vytask:`T1371` VRRP health-check scripts now can use arguments
|
||||
@ -247,12 +376,12 @@ Resolved issues
|
||||
correctly returns a list rather than a string
|
||||
|
||||
1.2.1
|
||||
-----
|
||||
=====
|
||||
|
||||
VyOS 1.2.1 is a maintenance release made in April 2019.
|
||||
|
||||
Resolved issues
|
||||
^^^^^^^^^^^^^^^
|
||||
---------------
|
||||
|
||||
* Package updates: kernel 4.19.32, open-vm-tools 10.3, latest Intel NIC drivers
|
||||
* :vytask:`T1326` The kernel now includes drivers for various USB serial
|
||||
@ -302,4 +431,5 @@ Resolved issues
|
||||
Earlier releases
|
||||
================
|
||||
|
||||
Release notes for legacy versions (1.1.x, 1.0.x) can be found in the `archived wiki <https://web.archive.org/web/20200212180711/https://wiki.vyos.net/wiki/Category:Release_notes>`_.
|
||||
Release notes for legacy versions (1.1.x, 1.0.x) can be found in the
|
||||
`archived wiki <https://web.archive.org/web/20200212180711/https://wiki.vyos.net/wiki/Category:Release_notes>`_.
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user