Turris OS 4.0.2 is out!

Dear Turris users,

We would like to inform you that we have just released Turris OS 4.0.2 for modular router Turris MOX and Turris Omnia from the RC branch. In this release, which is based on the latest stable release 18.06.05 of OpenWrt, you can find small improvements for Foris interface which was requested here on the forum. There are bug fixes and mostly security updates.

Highlights of this release:

  • When you go to the administration interface Foris and take a look at the About tab, you can find there which branch you are using.

  • We fixed autodection of router address in OpenVPN tab in Foris and added missing hardening package list.

  • Security fixes for php7, mariadb, python2, tcpdump, mariadb, lxc

Full release notes for this release:

* Based on the latest OpenWrt 18.06.5
* added missing hardening package list
* fixed autodetection of router address in Foris OpenVPN
* irssi: updated to version 1.2.2, fix CVE-2019-15717
* sudo: updated to version 1.8.28p1, fix CVE-2019-14287
* bind: updated to version 9.11.13, fix CVE-2019-6477
* openldap: updated to version 2.4.48, fix CVE-2019-13565
* kernel: updated to version 4.14.156
* libpcap: updated to version 1.9.1, fix CVE-2019-1516{1,2,3,4,5}
* tcpdump: updated to version 4.9.3, fix multiple CVEs
* python: updated to version 2.7.17
* php7: updated to version 7.2.25, fix CVE-2019-11043, CVE-2019-11042
* mariadb: updated to version 10.4.10, fix CVE-2019-2974, CVE-2019-2938
* foris: updated to version 100.6
* foris-controller: updated to version 1.0.6
* python[3]-cryptography: fix CVE-2018-10903
* ustream-ssl: CVE-2019-5101, CVE-2019-5102
* unbound: updated to version 1.9.5, fix CVE-2019-18934
* haproxy: updated to version 1.8.23, fix CVE-2019-19330
* lxc: fix CVE-2019-5736
* tor: updated to version 4.1.6
* nano: updated to version 4.6
* libiconv: updated to version 1.16
* enable RTC NVMEM access for Turris 1.x
* luci-compat, lmdb: new packages

When you are using previous release Turris OS 4.0.1, you should be updated to this version automatically, if you are not using approvals. If you do, you can approve it in the Updater tab.

We appreciate any feedback for this release.

2 Likes