iX Information Library
A one-stop shop for product information.
- /
- /
- /
FreeNAS 11.2-U2
The FreeNAS development team is pleased to announce the availability of the second update to FreeNAS 11.2. This bug fix release addresses the following security vulnerabilities:
- ZFS vnode reclaim deadlock
- Insufficient bounds checking in bhyve(8) device model
- sqlite update
- Timezone database information update
- kqueue race condition and kernel panic
- System call kernel data register leak
- OpenSSL security update (CVE-2018-5407)
- curl has been updated to 7.62.0 to address several security CVEs.
Samba has been updated to 4.9.4 which is the current stable release receiving new features. This version bump provides significant performance improvements as well as improved Time Machine over SMB support.
The Enable SMB1 support checkbox has been added to Services ‣ SMB. However, users are cautioned to not use SMB1.
The new web UI has received many bug fixes.
Due to the many security fixes and UI improvements, users of 11.2 systems are encouraged to update to 11.2-U2 using the instructions in the Guide.
Known Impacts
If you receive a “UnboundLocalError: local variable ‘bridge_cmd’ referenced before assignment” error when installing a plugin, click ADVANCED PLUGIN INSTALLATION in the installation screen and select “auto” for the VNET option. To resolve this error when starting a plugin or jail or when installing a jail, click the 3 button menu for that jail, click Edit, click Network Properties, and change the vnet_default_interface property to “auto”. If that does not resolve the issue, try checking and unchecking the DHCP box.
Known Issues
Some users are not able to create iSCSI device extents in the new UI. As a workaround, use the legacy UI to create device extents until the cause is diagnosed and the issue is resolved.
Some SMB sharing edge cases, particularly those using Unix permissions, may become inaccessible with this update. If your SMB share works in RELEASE-U1 but not in U2, enable the ixnas VFS Object for that share in Sharing ‣ Windows (SMB) Shares.
Changelog
| 23958 | Bug | Clarify Guide entry for UPS Port field when SNMP is selected |
| 25705 | Bug | Use HTTPS for updates |
| 25938 | Feature | Mimic Windows-style ACLs for NFSv4 |
| 27735 | Feature | Use FreeBSD file flags to store Samba DOS modes |
| 28578 | Bug | Add Configuring Persistent NFS-Shared Volumes section to Guide |
| 29074 | Bug | Clarify meaning of cloud sync times |
| 30495 | Feature | Adjust help text formatting and add ability to pin help text window to screen |
| 32793 | Bug | Report actual physical (compressed) L2ARC size |
| 33141 | Bug | Disable broken collectd ipmi plugin |
| 35305 | Bug | Correct the use of MSDOS in Import Disk section of Guide |
| 40596 | Feature | Update NFS Share section of Guide |
| 42419 | Feature | Update AFP section of Guide |
| 42659 | Bug | Add tip to Guide about configuring AD with two FreeNAS systems |
| 43437 | Bug | Limit the number of GSS request retries to prevent NFS from hanging |
| 43558 | Bug | Relax the TCP reassembly queue length limit to improve performance |
| 45156 | Feature | Move strings from Network section typescript files into helptext files |
| 45167 | Feature | Move strings from Storage section typescript files into helptext files |
| 45189 | Feature | Move strings from Sharing section typescript files into helptext files |
| 45211 | Feature | Move strings from Services section typescript files into helptext files |
| 45244 | Feature | Move strings from VM section typescript files into helptext files |
| 45398 | Feature | Add alert if syslog-ng is not running |
| 46168 | Bug | Use Pool Export/Disconnect instead of Detach in new UI |
| 47092 | Bug | Update openssh-portable port to 7.9.p1_1,1 |
| 50321 | Feature | Display NAA for Extents in new UI |
| 52182 | Bug | Fix trailing zeros charts on dashboard of new UI |
| 52532 | Feature | Add “TiB” as a choice when setting dataset quota/reservation in the new UI |
| 52607 | Bug | Allow user to select from remote filesystems available to Cloud Sync Task in new UI |
| 53334 | Bug | Correctly add bpf to devfs rules |
| 53404 | Bug | Add error handler to get_activated_pool call in new UI |
| 53622 | Bug | Prevent user from reclicking Submit when reporting a bug using Support page of new UI |
| 53629 | Bug | Fix percentage status for Import Disk in new UI |
| 53638 | Bug | Set background color of pool in new UI based on its status |
| 55728 | Bug | Remove listen queue limit and avoid some DNS requests in mountd |
| 56013 | Feature | Add “Enable SMB1 support” checkbox to Services -> SMB of new UI |
| 56112 | Bug | Make Services -> S3 -> Disks a required field |
| 56211 | Bug | Make iocage import more robust for jails with _1 in their names |
| 56241 | Bug | Prevent Cloud Sync Tasks from overflowing /mnt |
| 56250 | Bug | Clarify “Full disk encryption” in Guide |
| 56265 | Bug | Fix panic with lagg and vlan |
| 56340 | Bug | Add ability to allocate iocage TUN devices in new UI |
| 56364 | Bug | Improve error messages that display when the iocage defaults.json file is missing or corrupt |
| 56538 | Bug | Update swap description in Guide |
| 56556 | Bug | Use default gateway for iocage mac_prefix or generate one |
| 56607 | Bug | Do not log space usage statistics for snapshots accessed over .zfs |
| 56610 | Bug | Mention User Guide location in Support Resources of Guide |
| 56754 | Bug | Provide read-only access to edit settings page when jail is running |
| 56994 | Bug | Display the current state of the password show/hide icon |
| 57393 | Bug | Update vnet_mac entries for networking options of iocage jails in Guide |
| 57492 | Bug | Fix incorrect middleware usage when editing a jail’s properties in the new UI |
| 57519 | Bug | Fix APIv1 bug that prevented deletion of a cloned zvol |
| 57543 | Feature | Add sysutils/kiconvtool to the base system |
| 57555 | Bug | Do not allow changing UUID of iocage plugin jail |
| 57564 | Feature | Add ID or Name identifiers to entity-table actions of new UI |
| 57780 | Bug | Add warning to new UI when changing dataset aclmode from Windows to Unix |
| 57861 | Bug | Add enumeration to internal sorting for iocage releases |
| 57870 | Bug | Fix iocage — get -r |
| 57876 | Bug | Set iocage templates to read/write for json writing then back to readonly |
| 57888 | Bug | Fix ACL metadata corruption on zfs send/recv |
| 57924 | Feature | Add “Enable SMB1 support” checkbox to Services -> SMB of legacy UI |
| 58083 | Bug | Clarify TLS and SSL descriptions in Guide |
| 58158 | Bug | Correctly return true/false for jail.activate call |
| 58176 | Bug | Fix race condition in swap pager |
| 58293 | Bug | Add percentage status to Cloud Sync Tasks in new UI |
| 58371 | Bug | Properly encode ZFS properties |
| 58695 | Bug | Rename NextCloud plugin to Nextcloud |
| 58878 | Bug | Fix orphan VM devices |
| 59121 | Bug | Store workgroup discovered via LDAP in configuration database |
| 59202 | Bug | Use UTF by default in iocage exec and console |
| 59226 | Bug | Properly update reporting graph colors in new UI |
| 59397 | Bug | Do not require password when making edits to Active Directory form in new UI |
| 59445 | Bug | Include VLAN parent as possible choice when assigning a NIC to a VM |
| 59481 | Bug | Avoid dozens of recurring mDNS syscalls |
| 59490 | Bug | Make invalid fields more visible in new UI |
| 59544 | Feature | Add lagg support to VMs |
| 59598 | Bug | Parse devd messages that use “=” as a separator |
| 59625 | Bug | Fix using synchronous middleware client in asynchronous middleware code |
| 59634 | Bug | Fix bug in legacy UI wizard that prevented creation of iSCSI targets |
| 59706 | Feature | Update “Save Config” dialog in new UI |
| 59715 | Bug | Interpret error message as text strings in new UI |
| 59973 | Feature | Add reboot option to Manual Update screen of new UI |
| 60057 | Bug | Fix issue with saved value not being populated in cron permissions component of new UI |
| 60192 | Bug | Increase 50% capacity recommendation in Guide for a pool hosting iSCSI LUNs |
| 60219 | Bug | Allow middleware to control swap mirroring on boot disks |
| 60480 | Bug | Fix hostname in iocage rc.conf and /etc/hosts generation |
| 60543 | Bug | Destroy leftover snapshot for iocage thick jail creation |
| 60561 | Bug | Reduce logging verbosity in freenasldap.py |
| 60660 | Bug | Bump copyright year in motd to 2019 |
| 60705 | Feature | Display downloading progress when creating iocage jail or plugin |
| 60723 | Bug | Fix memory size reset bug in VM wizard of new UI |
| 60777 | Bug | Fix mat-option hover and focus having same styles in new UI |
| 60792 | Bug | Add ability to remove certificate from Active Directory form of new UI |
| 60930 | Bug | Replace links in tooltips that still point to internal User Guide |
| 60936 | Bug | Fix bug in Init/Shutdown scripts create and edit modes |
| 61107 | Bug | Allow promotion of datasets and zvols in new UI |
| 61116 | Bug | Do not monitor disabled directory services |
| 61188 | Bug | Add instructions for adding spare devices to an encrypted pool to Guide |
| 61299 | Bug | Remove mention of dd mode for Rufus in Guide |
| 61323 | Bug | Update “Replacing an Encrypted Disk” section of Guide |
| 61404 | Bug | Ensure filesystem tree view is sorted by alphabetical order in new UI |
| 61623 | Bug | Remove input restrictions on hosts allow and deny on SMB shares |
| 61641 | Bug | Align pool data tree in new UI |
| 61866 | Bug | Correct label and tooltip in VM Wizard |
| 62001 | Bug | Fix bug in Import Disk when a pool is locked |
| 62019 | Bug | Fix bhyve CVE-2018-17160 |
| 62028 | Bug | Set correct values for quotas in edit mode of new UI |
| 62055 | Bug | Fix bad sendmail and host_hostname default for new iocage jails |
| 62109 | Bug | Fix legend analytics causing endless loop if no data |
| 62298 | Bug | Add support for externally signed certificates to FTP and S3 services |
| 62334 | Bug | Massive refactor of iocage fstab |
| 62343 | Bug | Address iocage fstab issues |
| 62361 | Bug | Migrate users to ‘auto’ with iocage vnet_default_interface |
| 62469 | Bug | Do not allow changing UUID of iocage plugin jail in new UI |
| 62478 | Bug | Do not raise SSL invalid alert when SSL is not in use |
| 62550 | Bug | Position and size tooltips in new UI to stay within margins |
| 62574 | Bug | Accurately display certificate validity period |
| 62604 | Bug | Fix iocage restart |
| 62628 | Bug | Fix ffmpeg issue that prevented transcoding with Emby and Plex plugins |
| 62712 | Bug | Improve description for VNC Wait to Boot field |
| 62790 | Bug | Add overflow to content div on confirm dialogs within new UI |
| 62880 | Bug | Allow devices to be viewed when VM is running in new UI |
| 62892 | Bug | Disallow import or creation of certificates with key lengths less than 1024 |
| 62910 | Bug | Bug fix for nginx configuration file |
| 62991 | Bug | Fix ownership of Sonnar and raddar paths to allow these plugins to update |
| 63108 | Bug | Improve krb5.conf generation and fix some bugs for edge cases |
| 63144 | Bug | Do not traceback when cloning a VM and snapshot does not exist |
| 63225 | Bug | Fix installer recommended RAM message |
| 63234 | Bug | Add Advanced Plugin Installation button to new UI |
| 63306 | Bug | Destroy network related setup on iocage installation failure |
| 63357 | Bug | Display disk size in boot pool attach screen of new UI |
| 63360 | Bug | Make use of new middleware reporting of train descriptions in new UI |
| 63378 | Bug | Fix MSDOSFS import bug |
| 63402 | Bug | Use new CTL statistics API for iSCSI reporting graph |
| 63468 | Bug | Fix AWS S3 Cloud Sync hostname resolving to s3.None.amazonaws.com |
| 63477 | Feature | Add support for two new checkboxes for S3 Cloud Sync credentials to middleware |
| 63483 | Feature | Add two new checkboxes for S3 Cloud Sync credentials to new UI |
| 63513 | Bug | Test for None with iocage r[n]in filters |
| 63522 | Bug | Catch iocage subprocess exception |
| 63630 | Bug | Optimize background image in login screen of new UI |
| 63636 | Bug | Delay initial check for updates til necessary values are filled in new UI |
| 63639 | Bug | Fix traceback on alertservice.update |
| 63693 | Bug | Use Added isReady to display pre-populated Jail Edit fields for iOS |
| 63816 | Bug | Update base OpenSSL to 1.0.2q |
| 63837 | Bug | Fix handling of LDAP error messages in Directory Service wizard |
| 64005 | Bug | Use root-level dataset available size value instead of raw size in new UI |
| 64071 | Bug | Update curl to 7.62.0 |
| 64080 | Bug | Fix ‘iocage fetch’ sorting |
| 64089 | Bug | Clarify Start on Boot option in Guide |
| 64215 | Bug | Fix trusted domain users/groups error message in legacy UI |
| 64251 | Bug | Speed up pool.query for hundreds of datasets |
| 64323 | Bug | Do not capitalize iocage fetch RELEASE for local directories or custom mirrors |
| 64341 | Bug | Fix bug when creating additional iocage epair devices |
| 64350 | Bug | Properly set MTU on all iocage vnet interfaces |
| 64482 | Bug | Allow for spaces in snapshot names |
| 64530 | Bug | Fix traceback when updating dataset in new UI |
| 64557 | Bug | Clarify in Guide how plugins and jails are updated or upgraded from the CLI |
| 64563 | Bug | Allow zvol creation in new UI without specifying the Block Size |
| 64575 | Bug | Handle traceback when pool not found |
| 64599 | Bug | Generate SMART config on manual service start |
| 64647 | Bug | Fix mismatching RELEASEs being fetched and a couple other iocage bugs |
| 64656 | Bug | Fix traceback when stopping a VM |
| 64716 | Bug | Suppress default Netdata RAM usage warning |
| 64728 | Bug | Correctly display available and used space for datasets in new UI |
| 64764 | Bug | Clean up IPv4 field in legacy UI when DHCP is checked |
| 64935 | Bug | Fix download link in Guide |
| 65052 | Bug | Use correct permissions for /var/log/netdata/debug.log |
| 65139 | Bug | Display VM’s VNC port number in new UI |
| 65187 | Bug | Fix FreeBSD-EN-18:18.zfs |
| 65205 | Bug | Accurately display ZFS vdev statistics in UI |
| 65220 | Bug | Update plugins example in Guide so that it matches screenshot |
| 65247 | Feature | Add “Date Created” column to Storage –> Snapshots of new UI |
| 65376 | Bug | Allow middleware startup on low-performance boot devices |
| 65544 | Bug | Do not start S3 service at boot if ‘Start Automatically’ is not checked |
| 65949 | Bug | Allow Windows 10 and Server 2019 to pass security check during SMB connect |
| 66033 | Bug | Add warning when using Manual Setup in legacy UI for volume creation |
| 66048 | Bug | Improve validation error message for allowed iSCSI target name |
| 66214 | Bug | Add visual row separation to pool list in new UI |
| 66367 | Bug | Clean up bulk edit disk actions in new UI |
| 66385 | Bug | New UI improvements for Safari |
| 66709 | Bug | Use midclt to get alerts for freenas-debug |
| 66880 | Bug | Fix dhclient network device flapping |
| 66925 | Bug | Update Private Key tooltips in new UI |
| 66981 | Bug | Prevent shell text from overflowing in new UI |
| 66999 | Bug | Display applicable middleware error messages in new UI when adding or editing VM devices |
| 67071 | Bug | Escape single quotes in media description of installer |
| 67420 | Bug | Use entity-table for VM landing page |
| 67510 | Bug | Do not require plugin name to exactly match MANIFEST name |
| 67602 | Bug | Fix bug that prevented S3 service from starting |
| 67618 | Bug | Only allow ASCII for email password |
| 67701 | Bug | Return less verbose error if middleware is not running |
| 67728 | Feature | Update to Samba 4.9.4 |
| 67762 | Bug | Fix rysnc validation bug |
| 67827 | Bug | Remove spurious ws4py errors from debug log |
| 67879 | Bug | Do not limit Replication Tasks listing in new UI |
| 67944 | Bug | Make sure the required directory structure exists when creating a VM |
| 68115 | Bug | Adjust color in Cron Jobs page of new UI |
| 68187 | Bug | Grab entire contents of post-installation message when installing a plugin |
| 68214 | Bug | Add support for Active Directory users to NFS mapall and maproot fields of new UI |
| 68239 | Bug | Allow Active Directory users to pass NFS mapall or maproot validation |
| 68277 | Bug | Report actual physical (compressed) L2ARC size in new UI |
| 68293 | Bug | Prevent sharesec_reset from incorrectly adding owner and group entries to the ACLs of an SMB share |
| 68430 | Feature | Add Time Machine over SMB support to new UI |
| 68473 | Feature | Update ifconfig to display started virtual machine names in tap descriptions |
| 68493 | Bug | Have middleware use description from trains.txt |
| 68716 | Bug | Fix bug in Pool Manager filter disks action of new UI |
| 68754 | Bug | Add IPv6 support to network.general.summary in middleware |
| 68815 | Bug | Do not display error when changing from NFSv4 to NFSv3 |
| 68835 | Feature | Add support for Time Machine over SMB |
| 68923 | Bug | Implement VM clone feature in new UI |
| 69022 | Bug | Fix FreeBSD security advisories 19:03 through 19:05 |
| 69159 | Bug | Increase SQLite retry timeout to prevent locking on slow USB devices |
| 69168 | Bug | Store zvol size value for use by new UI |
| 69195 | Bug | Use host_hostname for jail hostname in new UI |
| 69204 | Bug | Use default value of auto for vnet_default_interface in new UI |
| 69339 | Bug | Add a semaphore for calls within the same connection |
| 69409 | Bug | Enable rrdcached |
| 69465 | Bug | Hide passwords from middleware core.get_jobs output |
| 69501 | Bug | Fix bug that prevented attaching a disk to the boot pool using the new UI |
| 69598 | Bug | Remove Microsoft Download Tool from Guide |
| 69733 | Bug | Fix bug that prevented SMART tests scheduled at midnight from running |
| 69744 | Bug | Update translation files with current strings |
| 69771 | Bug | Do not have middleware require password or key file for SFTP Cloud Credential |
| 69787 | Bug | Fix UPS shutdown logic |
| 69814 | Bug | Fix condition where new UI column headers fail to load on page refresh of entity tables |
| 69823 | Bug | Prevent invalid train changes in middleware update plugin |
| 69825 | Bug | Fix TFTP listen host option |
| 70606 | Bug | Fix remaining issues with listing snapshots in new UI |
| 70624 | Bug | Handle VM errors gracefully in new UI |
| 70626 | Bug | Fix traceback and delay of mDNS advertisement |
| 70678 | Bug | Remove unnecessary vm.query calls to middleware |
| 70896 | Bug | Prevent ZFSException from breaking jail API calls |
| 71022 | Bug | Allow rollback of any snapshot but warn that rolling back an older snapshot removes all newer snapshots |
| 71337 | Bug | Use a split instead of a regex to find the poolname for zvol blocksize |
| 71435 | Bug | Do not traceback when size of locked pool is unknown |
| 71699 | Bug | Document new plugin_schema key in Guide |
| 71785 | Bug | Address Samba listen queue overflows and issues found in vfs_ixnas |
| 72225 | Bug | Make rrdcached report rrdc_update failures as warnings |
| 72433 | Bug | Firefox fix to prevent some click actions in new UI from causing a logout |
| 72459 | Bug | Add two new checkboxes for S3 Cloud Sync credentials to legacy UI |
| 72475 | Bug | Fix “Size” typo in Reporting ->ZFS section of new UI |
| 72499 | Bug | Add filters to negate middlewared startswith and endswith filters |
| 72777 | Bug | Bump copyright year in new UI to 2019 |
| 72795 | Bug | Create a default directory and give correct permission to Syncthing plugin |
| 72984 | Bug | Fix SSSD ldb error |
| 73110 | Bug | Fix integer math overflow in UMA hash_alloc() that prevented ARC from growing above 512GB |
| 73155 | Bug | Fix traceback in new UI when editing dataset with reservation or quota containing a decimal |
| 73191 | Bug | Bug fix for Dynamic DNS |
| 73335 | Bug | Pull in FreeBSD fixes so that ESXi 6.7 does not force NFSv4 datastores to mount read-only |
| 73792 | Bug | Merge FreeBSD-SA-19:01.syscall fix |
| 73819 | Bug | Fix OpenSSL path |
| 73975 | Bug | Improve exception handling for iocage listing |
| 74199 | Bug | Add mlx5ib(4) driver to the build as module |
