Turris OS 3.9.3 is out!

Dear Turris users,

we just released Turris OS 3.9.3. It fixes just one security issue in Knot Resolver - CVE-2018-1000002 - and we just backported the patch. So it is a really small release, but we are still interested in your feedback.

Happy routing

2 Likes

Installed and no problems! Should I restart the router or at least the knot resolver for changes to take effect?

Thank you for the quick fix

Knot resolver is restarted automatically when it’s updated. So no you don’t have to.

1 Like

Well, in the very unlikely event that you have been attacked, the incorrectly denied domains/data would remain in the DNS cache and served repeatedly by the updated version. (Cache is only cleared on reboots by default now, I think.) The vulnerability was released to Omnias within a couple hours after first public information. Details here and further on.

A post was merged into an existing topic: Turris OS 3.9.3 je venku!

Update worked without any issues.

as always i wanted to delete the at entry that reboots the router after a week, then is saw this.
is this normal so often?

root@kukuzi:/etc/config# cat /etc/turris-version
3.9.3
root@kukuzi:/etc/config# at -l
19      Fri Feb  2 03:30:00 2018 a root
20      Fri Feb  2 03:30:00 2018 a root
21      Fri Feb  2 03:30:00 2018 a root
22      Fri Feb  2 03:30:00 2018 a root
23      Fri Feb  2 03:30:00 2018 a root
24      Fri Feb  2 03:30:00 2018 a root
25      Fri Feb  2 03:30:00 2018 a root
26      Fri Feb  2 03:30:00 2018 a root
27      Fri Feb  2 03:30:00 2018 a root
28      Fri Feb  2 03:30:00 2018 a root
29      Fri Feb  2 03:30:00 2018 a root
30      Fri Feb  2 03:30:00 2018 a root
31      Fri Feb  2 03:30:00 2018 a root
32      Fri Feb  2 03:30:00 2018 a root
root@kukuzi:/etc/config#