Turris OS 3.11.23

•  sudo: security update (Baron Samedit) - CVE-2021-3156
•  dnsmasq: security update (DNSpooq)
•  ffmpeg, curl, uci: security update
•  youtube-dl, msmtp, netdata, tar, foris: update

Turris OS 3.11.22

• base-files: do not require explicit enabling of nf_conntrack_helper
• updater-ng, knot-resolver, unbound: update
• foris: XSS bug fix

Turris OS version 3.11.21

- Backported security patch for Sad DNS

Released version 3.11.20

 • openssl, gnutls, opkg, samba4: security updates
 • knot-resolver, knot, netmetr, unbound: update
 • nf-nathelper-extra: removed from userlist (CVE-2020-28041)

Released version 3.11.19

 • notification: check if country is set for stable working Wi-Fi
 • curl, mbedtls: security updates
 • unbound, mdadm, youtube-dl, smartmontools, msmtp, haveged: update
 • obfsproxy, obfs4proxy, yara: removed not-available packages
 • knot-resolver: DNSSEC key is read-only

Released version 3.11.19.1

• mbedtls: security update

Released version 3.11.18

• gnutls: security update
• foris, foris-openvpn-plugin, knot-resolver: update
• 3xmigrate: new userlist

Released version 3.11.17

 • git, samba4, krb5, unbound, knot-resolver, bind: security update
 • updater-ng, nextcloud, btrfs-progs, resolver-conf: update
 • python3-msgpack, atlas-sw-probe, sentinel-dynfw-client: update

Released version 3.11.16

• tor, subversion: security update
• msmtp, curl, atlas-sw-probe, reptyr, btrfs-progs, nextcloud, youtube-dl, netdata, netmetr: update

Released version 3.11.15

• suricata, ppp: security update
• nextcloud, turris-firewall-rules, unbound, lighttpd: update

Released version 3.11.14

• opkg: security update
• wireguard, youtube-dl: update

Released version 3.11.13

• openssl, ffmpeg, unbound: security update
• kernel, resolver-conf, knot-resolver, nextcloud: update

Released version 3.11.12

• git: security update

Released version 3.11.11

* Merry Christmas!
* knot-resolver: security update

Released version 3.11.10

• php7: security update
• kernel, unbound, python3-uci: update

Released version 3.11.9

• tcpdump, sudo, uci, libarchive: security update
• knot-resolver, wireguard, kernel, youtube-dl, turris-maintain, knot: update
• foris-controller-openvpn-module: fix server ip address autodetection
• ripe-atlas-probe, atlas-sw-probe: new packages

Released version 3.11.8

• foris, youtube-dl, wireguard, nextcloud, kernel: update
• bird, python[3]-urllib3, netdata, ustream-ssl: update
• openssl, unbound: security update

Released version 3.11.7

• unbound, haveged, youtube-dl, wireguard, nextcloud, kernel: update
• bind, lighttpd: security update
• ucollect: CA certificate update

Released version 3.11.6

iptables: security update (CVE-2019-11360)
knot-resolver, netdata, youtube-dl, foris, sentinel-certgen, wireguard, python3-idna, kernel: update
resolver-conf: add secondary IP for DNS server (IPv4 and IPv6)
turris-netboot: minor fixes and add parameter force
dev-detect: introduce a new lightweight version than pakon-dev-detect (opt-in)

Released version 3.11.5

 • bind, libxslt, libpng, dovecot, gnutls, wget, samba4, tiff, suricata: security updates
 • schnapps, netdata, youtube-dl, libhtp, foris, syslog-ng, nextcloud, resolver-conf: update
 • python-certifi, python-urllib3, python3-pyroute2: new packages
 • foris: experimental centralized device management
 • kernel: update (CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)