diff options
Diffstat (limited to 'docs/changelog')
| -rw-r--r-- | docs/changelog/1.3.rst | 426 |
1 files changed, 422 insertions, 4 deletions
diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst index 058f38d6..38adb0d2 100644 --- a/docs/changelog/1.3.rst +++ b/docs/changelog/1.3.rst @@ -8,13 +8,432 @@ _ext/releasenotes.py +2022-04-19 +========== + +* :vytask:`T4344` (bug): DHCP statistics not matching, conf-mode generates incorrect pool name with dash +* :vytask:`T4268` (bug): Elevated LA while using VyOS monitoring feature + + +2022-04-08 +========== + +* :vytask:`T4331` (bug): IPv6 link local addresses are not configured when an interface is in a VRF +* :vytask:`T4339` (bug): wwan: tab-completion results in "No such file or directory" if there is no WWAN interface +* :vytask:`T4338` (bug): wwan: changing interface description should not trigger reconnect +* :vytask:`T4324` (bug): wwan: check alive script should only be run via cron if a wwan interface is configured at all + + +2022-04-07 +========== + +* :vytask:`T4330` (bug): MTU settings cannot be applied when IPv6 is disabled +* :vytask:`T4346` (feature): Deprecate "system ipv6 disable" option to disable address family within OS kernel +* :vytask:`T4337` (bug): isis: IETF SPF delay algorithm can not be configured - results in vyos.frr.CommitError +* :vytask:`T4319` (bug): The command "set system ipv6 disable" doesn't work as expected. +* :vytask:`T4341` (feature): login: disable user-account prior to deletion and wait until deletion is complete +* :vytask:`T4336` (feature): isis: add support for MD5 authentication password on a circuit + + +2022-04-06 +========== + +* :vytask:`T4308` (feature): Op-comm "Show log frr" to view specific protocol logs + + +2022-03-29 +========== + +* :vytask:`T3686` (bug): Bridging OpenVPN tap with no local-address breaks + + +2022-03-24 +========== + +* :vytask:`T4294` (bug): Adding a new openvpn-option does not restart the OpenVPN process +* :vytask:`T4230` (bug): OpenVPN server configuration deleted after reboot when using a VRRP virtual-address + + +2022-03-21 +========== + +* :vytask:`T4311` (bug): CVE-2021-4034: local privilege escalation in PolKit +* :vytask:`T4310` (bug): CVE-2022-0778: infinite loop in OpenSSL certificate parsing + + +2022-03-12 +========== + +* :vytask:`T4296` (bug): Interface config injected by Cloud-Init may interfere with VyOS native +* :vytask:`T4002` (default): firewall group network-group long names restriction incorrect behavior + + +2022-03-11 +========== + +* :vytask:`T4297` (bug): Interface configuration saving fails for ice/iavf based interfaces because they can't change speed/duplex settings + + +2022-03-05 +========== + +* :vytask:`T4259` (bug): The conntrackd daemon can be started wrongly + + +2022-02-28 +========== + +* :vytask:`T4273` (bug): ssh: Upgrade from 1.2.X to 1.3.0 breaks config +* :vytask:`T4115` (bug): reboot in <x> not working as expected + + +2022-02-24 +========== + +* :vytask:`T4267` (bug): Error - Missing required "ip key" parameter + + +2022-02-23 +========== + +* :vytask:`T4264` (bug): vxlan: interface is destroyed and rebuild on description change +* :vytask:`T4263` (bug): vyos.util.leaf_node_changed() dos not honor valueLess nodes + + +2022-02-21 +========== + +* :vytask:`T4120` (feature): [VXLAN] add ability to set multiple unicast-remotes + + +2022-02-20 +========== + +* :vytask:`T4261` (feature): MACsec: add DHCP client support +* :vytask:`T4203` (bug): Reconfigure DHCP client interface causes brief outages + + +2022-02-19 +========== + +* :vytask:`T4258` (bug): [DHCP-SERVER] error parameter on Failover + + +2022-02-17 +========== + +* :vytask:`T4241` (bug): ocserv openconnect looks broken in recent bulds of 1.3 Equuleus +* :vytask:`T4255` (bug): Unexpected print of dict bridge on delete +* :vytask:`T4240` (bug): Cannot add wlan0 to bridge via configure +* :vytask:`T4154` (bug): Error add second gre tunnel with the same source interface + + +2022-02-16 +========== + +* :vytask:`T4237` (bug): Conntrack-sync error - error adding listen-address command + + +2022-02-15 +========== + +* :vytask:`T4201` (bug): Firewall - ICMPv6 matches not working as expected on 1.3.0 +* :vytask:`T3006` (bug): Accel-PPP & vlan-mon config get invalid VLAN +* :vytask:`T3494` (bug): DHCPv6 leases traceback when PD using + + +2022-02-13 +========== + +* :vytask:`T4242` (bug): ethernet speed/duplex can never be switched back to auto/auto +* :vytask:`T4191` (bug): Lost access to host after VRF re-creating + + +2022-02-11 +========== + +* :vytask:`T3872` (feature): Add configurable telegraf monitoring service +* :vytask:`T4234` (bug): Show firewall partly broken in 1.3.x + + +2022-02-10 +========== + +* :vytask:`T4165` (bug): Custom conntrack rules cannot be deleted + + +2022-02-08 +========== + +* :vytask:`T4227` (bug): Typo in help completion of hello-time option of bridge interface + + +2022-02-07 +========== + +* :vytask:`T4233` (bug): ssh: sync regex for allow/deny usernames to "system login" +* :vytask:`T4087` (feature): IPsec IKE-group proposals limit of 10 pieces + + +2022-02-06 +========== + +* :vytask:`T4228` (bug): bond: OS error thrown when two bonds use the same member + + +2022-02-05 +========== + +* :vytask:`T4226` (bug): VRRP transition-script does not work for groups name which contains -(minus) sign + + +2022-02-04 +========== + +* :vytask:`T4196` (bug): DHCP server client-prefix-length parameter results in non-functional leases + + +2022-02-03 +========== + +* :vytask:`T3643` (bug): show vpn ipsec sa doesn't show tunnels in "down" state + + +2022-02-01 +========== + +* :vytask:`T4198` (bug): Error shown on commit + + +2022-01-29 +========== + +* :vytask:`T4153` (bug): Monitor bandwidth-test initiate not working + + +2022-01-28 +========== + +* :vytask:`T4184` (bug): NTP allow-clients address doesn't work it allows to use ntp server for all addresses + + +2022-01-24 +========== + +* :vytask:`T4204` (feature): Update Accel-PPP to a newer revision + + +2022-01-17 +========== + +* :vytask:`T3164` (bug): console-server ssh does not work with RADIUS PAM auth + + +2022-01-15 +========== + +* :vytask:`T4183` (feature): IPv6 link-local address not accepted as wireguard peer +* :vytask:`T4110` (feature): [IPV6-SSH/DNS} enable IPv6 link local adresses as listen-address %eth0 + + +2022-01-12 +========== + +* :vytask:`T4168` (bug): IPsec VPN is impossible to restart when DMVPN is configured +* :vytask:`T4167` (bug): DMVPN apply wrong param on the first configuration +* :vytask:`T4152` (bug): NHRP shortcut-target holding-time does not work + + +2022-01-10 +========== + +* :vytask:`T3299` (bug): Allow the web proxy service to listen on all IP addresses +* :vytask:`T3115` (feature): Add support for firewall on L3 VIF bridge interface + + +2022-01-09 +========== + +* :vytask:`T3822` (bug): OpenVPN processes do not have permission to read key files generated with `run generate openvpn key` +* :vytask:`T4142` (bug): Input ifbX interfaces not displayed in op-mode +* :vytask:`T3914` (bug): VRRP rfc3768-compatibility doesn't work with unicast peers + + +2022-01-07 +========== + +* :vytask:`T3924` (bug): VRRP stops working with VRF + + +2022-01-06 +========== + +* :vytask:`T4141` (bug): Set high-availability vrrp sync-group without members error + + +2022-01-03 +========== + +* :vytask:`T4065` (bug): IPSEC configuration error: connection to unix:///var/run/charon.ctl failed: No such file or directory +* :vytask:`T4052` (bug): Validator return traceback on VRRP configuration with the script path not in config dir +* :vytask:`T4128` (bug): keepalived: Upgrade package to add VRF support + + +2021-12-31 +========== + +* :vytask:`T4081` (bug): VRRP health-check script stops working when setting up a sync group + + +2021-12-29 +========== + +* :vytask:`T2922` (bug): The `vpn ipsec logging log-modes` miss the IPSec daemons state check +* :vytask:`T2695` (bug): Flow-accounting bug with subinterfaces +* :vytask:`T2400` (default): OpenVPN: dont restart server if no need +* :vytask:`T4086` (default): system login banner is not removed on deletion. + + +2021-12-28 +========== + +* :vytask:`T3380` (bug): Show vpn ike sa with IPv6 remote peer +* :vytask:`T2933` (feature): VRRP add option virtual_ipaddress_excluded + + +2021-12-27 +========== + +* :vytask:`T2566` (bug): sstp not able to run tunnels ipv6 only +* :vytask:`T4093` (bug): SNMPv3 snmpd.conf generation bug +* :vytask:`T2764` (enhancment): Increase maximum number of NAT rules + + +2021-12-26 +========== + +* :vytask:`T4104` (bug): RAID1: "add raid md0 member sda1" does not restore boot sector + + +2021-12-25 +========== + +* :vytask:`T4101` (bug): commit-archive: Use of uninitialized value $source_address in concatenation +* :vytask:`T4055` (feature): Add VRF support for HTTP(S) API service + + +2021-12-24 +========== + +* :vytask:`T3854` (bug): Missing op-mode commands for conntrack-sync + + +2021-12-23 +========== + +* :vytask:`T4092` (bug): IKEv2 mobike commit failed with DMVPN nhrp +* :vytask:`T3354` (default): Convert strip-private script from Perl to Python + + +2021-12-22 +========== + +* :vytask:`T3356` (feature): Script for remote file transfers + + +2021-12-21 +========== + +* :vytask:`T4053` (bug): VRRP impossible to set scripts out of the /config directory +* :vytask:`T4013` (bug): Add pkg cloudwatch for AWS images +* :vytask:`T3913` (bug): VRF traffic fails after upgrade from 1.3.0-RC6 to 1.3.0-EPA1/2 + + +2021-12-20 +========== + +* :vytask:`T4088` (default): Fix typo in login banner + + +2021-12-19 +========== + +* :vytask:`T3912` (default): Use a more informative default post-login banner + + +2021-12-17 +========== + +* :vytask:`T3176` (bug): Ordering of ports on EdgeCore SAF51015I is mixed up? +* :vytask:`T4059` (bug): VRRP sync-group transition script does not persist after reboot + + +2021-12-16 +========== + +* :vytask:`T4046` (feature): Sflow - Add Source address parameter +* :vytask:`T2615` (default): Provide an explicit option for server fingerprint in commit archive, and make insecure the default +* :vytask:`T4076` (enhancment): Allow setting CORS options in HTTP API +* :vytask:`T3378` (bug): commit-archive source-address broken for IPv6 addresses + + +2021-12-15 +========== + +* :vytask:`T4077` (bug): op-mode: bfd: drop "show protocols bfd" in favour of "show bfd" +* :vytask:`T4073` (bug): "show protocols bfd peer <>" shows incorrect peer information. + + +2021-12-14 +========== + +* :vytask:`T4071` (feature): Allow HTTP API to bind to unix domain socket + + +2021-12-12 +========== + +* :vytask:`T4036` (bug): VXLAN incorrect raiseError if set multicast network instead of singe address + + +2021-12-10 +========== + +* :vytask:`T4068` (feature): Python: ConfigError should insert line breaks into the error message + + +2021-12-09 +========== + +* :vytask:`T4033` (bug): VRRP - Error security when setting scripts +* :vytask:`T4064` (bug): IP address for vif is not removed from the system when deleted in configuration +* :vytask:`T4063` (bug): VRRP log error - /usr/libexec/vyos/vyos-vrrp-conntracksync.sh - No such file or directory +* :vytask:`T4060` (enhancment): Extend configquery for use before boot configuration is complete + + +2021-12-08 +========== + +* :vytask:`T4024` (bug): Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval + + +2021-12-07 +========== + +* :vytask:`T4041` (servicerequest): "transition-script" doesn't work on "sync-group" + + +2021-12-06 +========== + +* :vytask:`T4012` (feature): Add VRF support for TFTP + + 2021-12-05 ========== * :vytask:`T4034` (bug): "make xcp-ng-iso" still includes vyos-xe-guest-utilities * :vytask:`T2076` (feature): RAID install: sfdisk change-id is deprecated in favor of --part-type -* :vytask:`T4041` (bug): "transition-script" doesn't work on "sync-group" -* :vytask:`T1869` (bug): Install and Boot from RAID Doesn't Work * :vytask:`T1126` (bug): Reusing a RAID from a BIOS install in an EFI install causes a failure to boot @@ -261,7 +680,6 @@ * :vytask:`T3254` (bug): Dynamic DNS status shows incorrect last update time * :vytask:`T3253` (bug): rpki: multiple peers cannot be configured * :vytask:`T3219` (default): Typo in openvpn server client config for IPv6 iroute -* :vytask:`T2764` (enhancment): Increase maximum number of NAT rules * :vytask:`T2100` (feature): BGP route adverisement wih checks rib * :vytask:`T1663` (enhancment): T1656 equuleus: buster: arm64/aarch64: ipaddrcheck does not complete testing * :vytask:`T1243` (bug): BGP local-as accept wrong values @@ -1215,7 +1633,7 @@ 2021-02-16 ========== -* :vytask:`T3318` (feature): Update Linux Kernel to v5.4.163 / 5.10.83 +* :vytask:`T3318` (feature): Update Linux Kernel to v5.4.188 / 5.10.111 2021-02-14 |