AFP vulnerability - update now if you use AFP

[anodos]

https://www.ixsystems.com/blog/2018-12-afp-security-update-truenas-freenas/

Unauthenticated remote code execution as root. If you're in a business environment, you may want to immediately begin planning for an outage to upgrade.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1160

This is in case people didn't see the announcement in the announce list.

 

[m0nkey_]

What with Apple deprecating the AFP protocol in favor of SMB with their switch from HFS to APFS, shouldn't it be time to consider sunseting AFP support in FreeNAS (or at least discourage it's use)? The Samba project has been working to include Time Machine support in vfs_fruit.

 

[seanm]

AFP is probably still interesting for various corner cases, but it really should be de-emphasized in docs & UI, and Time Machine support over SMB can't come soon enough.

Kudos for getting this security patch out quickly though!

 

[anodos]

What with Apple deprecating the AFP protocol in favor of SMB with their switch from HFS to APFS, shouldn't it be time to consider sunseting AFP support in FreeNAS (or at least discourage it's use)? The Samba project has been working to include Time Machine support in vfs_fruit.

The next 11.2 release will have Time Machine over SMB support. AFP support will still be in FreeNAS for the foreseeable future.