11.2-U2

February 18, 2019

The FreeNAS development team is pleased to announce the availability of the second update to FreeNAS 11.2. This bug fix release addresses the following security vulnerabilities:

• ZFS vnode reclaim deadlock
• Insufficient bounds checking in bhyve(8) device model
• sqlite update
• Timezone database information update
• kqueue race condition and kernel panic
• System call kernel data register leak
• OpenSSL security update (CVE-2018-5407)
• curl has been updated to 7.62.0 to address several security CVEs.
• Samba has been updated to 4.9.4 which is the current stable release receiving new features. This version bump provides significant performance improvements as well as improved Time Machine over SMB support.

The Enable SMB1 support checkbox has been added to Services > SMB. However, users are cautioned to not use SMB1.

The new web UI has received many bug fixes.

Due to the many security fixes and UI improvements, users of 11.2 systems are encouraged to update to 11.2-U2 using the instructions in the Guide.

If you receive a “UnboundLocalError: local variable ‘bridge_cmd’ referenced before assignment” error when installing a plugin, click ADVANCED PLUGIN INSTALLATION in the installation screen and select “auto” for the VNET option. To resolve this error when starting a plugin or jail or when installing a jail, click the 3 button menu for that jail, click Edit, click Network Properties, and change the vnet_default_interface property to “auto”. If that does not resolve the issue, try checking and unchecking the DHCP box.

Some users are not able to create iSCSI device extents in the new UI. As a workaround, use the legacy UI to create device extents until the cause is diagnosed and the issue is resolved.

Some SMB sharing edge cases, particularly those using Unix permissions, may become inaccessible with this update. If your SMB share works in RELEASE-U1 but not in U2, enable the ixnas VFS Object for that share in Sharing > Windows (SMB) Shares.

• 23958 Bug Clarify Guide entry for UPS Port field when SNMP is selected
• 25705 Bug Use HTTPS for updates
• 25938 Feature Mimic Windows-style ACLs for NFSv4
• 27735 Feature Use FreeBSD file flags to store Samba DOS modes
• 28578 Bug Add Configuring Persistent NFS-Shared Volumes section to Guide
• 29074 Bug Clarify meaning of cloud sync times
• 30495 Feature Adjust help text formatting and add ability to pin help text window to screen
• 32793 Bug Report actual physical (compressed) L2ARC size
• 33141 Bug Disable broken collectd ipmi plugin
• 35305 Bug Correct the use of MSDOS in Import Disk section of Guide
• 40596 Feature Update NFS Share section of Guide
• 42419 Feature Update AFP section of Guide
• 42659 Bug Add tip to Guide about configuring AD with two FreeNAS systems
• 43437 Bug Limit the number of GSS request retries to prevent NFS from hanging
• 43558 Bug Relax the TCP reassembly queue length limit to improve performance
• 45156 Feature Move strings from Network section typescript files into helptext files
• 45167 Feature Move strings from Storage section typescript files into helptext files
• 45189 Feature Move strings from Sharing section typescript files into helptext files
• 45211 Feature Move strings from Services section typescript files into helptext files
• 45244 Feature Move strings from VM section typescript files into helptext files
• 45398 Feature Add alert if syslog-ng is not running
• 46168 Bug Use Pool Export/Disconnect instead of Detach in new UI
• 47092 Bug Update openssh-portable port to 7.9.p1_1,1
• 50321 Feature Display NAA for Extents in new UI
• 52182 Bug Fix trailing zeros charts on dashboard of new UI
• 52532 Feature Add “TiB” as a choice when setting dataset quota/reservation in the new UI
• 52607 Bug Allow user to select from remote filesystems available to Cloud Sync Task in new UI
• 53334 Bug Correctly add bpf to devfs rules
• 53404 Bug Add error handler to get_activated_pool call in new UI
• 53622 Bug Prevent user from reclicking Submit when reporting a bug using Support page of new UI
• 53629 Bug Fix percentage status for Import Disk in new UI
• 53638 Bug Set background color of pool in new UI based on its status
• 55728 Bug Remove listen queue limit and avoid some DNS requests in mountd
• 56013 Feature Add “Enable SMB1 support” checkbox to Services -> SMB of new UI
• 56112 Bug Make Services -> S3 -> Disks a required field
• 56211 Bug Make iocage import more robust for jails with _1 in their names
• 56241 Bug Prevent Cloud Sync Tasks from overflowing /mnt
• 56250 Bug Clarify “Full disk encryption” in Guide
• 56265 Bug Fix panic with lagg and vlan
• 56340 Bug Add ability to allocate iocage TUN devices in new UI
• 56364 Bug Improve error messages that display when the iocage defaults.json file is missing or corrupt
• 56538 Bug Update swap description in Guide
• 56556 Bug Use default gateway for iocage mac_prefix or generate one
• 56607 Bug Do not log space usage statistics for snapshots accessed over .zfs
• 56610 Bug Mention User Guide location in Support Resources of Guide
• 56754 Bug Provide read-only access to edit settings page when jail is running
• 56994 Bug Display the current state of the password show/hide icon
• 57393 Bug Update vnet_mac entries for networking options of iocage jails in Guide
• 57492 Bug Fix incorrect middleware usage when editing a jail’s properties in the new UI
• 57519 Bug Fix APIv1 bug that prevented deletion of a cloned zvol
• 57543 Feature Add sysutils/kiconvtool to the base system
• 57555 Bug Do not allow changing UUID of iocage plugin jail
• 57564 Feature Add ID or Name identifiers to entity-table actions of new UI
• 57780 Bug Add warning to new UI when changing dataset aclmode from Windows to Unix
• 57861 Bug Add enumeration to internal sorting for iocage releases
• 57870 Bug Fix iocage — get -r
• 57876 Bug Set iocage templates to read/write for json writing then back to readonly
• 57888 Bug Fix ACL metadata corruption on zfs send/recv
• 57924 Feature Add “Enable SMB1 support” checkbox to Services -> SMB of legacy UI
• 58083 Bug Clarify TLS and SSL descriptions in Guide
• 58158 Bug Correctly return true/false for jail.activate call
• 58176 Bug Fix race condition in swap pager
• 58293 Bug Add percentage status to Cloud Sync Tasks in new UI
• 58371 Bug Properly encode ZFS properties
• 58695 Bug Rename NextCloud plugin to Nextcloud
• 58878 Bug Fix orphan VM devices
• 59121 Bug Store workgroup discovered via LDAP in configuration database
• 59202 Bug Use UTF by default in iocage exec and console
• 59226 Bug Properly update reporting graph colors in new UI
• 59397 Bug Do not require password when making edits to Active Directory form in new UI
• 59445 Bug Include VLAN parent as possible choice when assigning a NIC to a VM
• 59481 Bug Avoid dozens of recurring mDNS syscalls
• 59490 Bug Make invalid fields more visible in new UI
• 59544 Feature Add lagg support to VMs
• 59598 Bug Parse devd messages that use “=” as a separator
• 59625 Bug Fix using synchronous middleware client in asynchronous middleware code
• 59634 Bug Fix bug in legacy UI wizard that prevented creation of iSCSI targets
• 59706 Feature Update “Save Config” dialog in new UI
• 59715 Bug Interpret error message as text strings in new UI
• 59973 Feature Add reboot option to Manual Update screen of new UI
• 60057 Bug Fix issue with saved value not being populated in cron permissions component of new UI
• 60192 Bug Increase 50% capacity recommendation in Guide for a pool hosting iSCSI LUNs
• 60219 Bug Allow middleware to control swap mirroring on boot disks
• 60480 Bug Fix hostname in iocage rc.conf and /etc/hosts generation
• 60543 Bug Destroy leftover snapshot for iocage thick jail creation
• 60561 Bug Reduce logging verbosity in freenasldap.py
• 60660 Bug Bump copyright year in motd to 2019
• 60705 Feature Display downloading progress when creating iocage jail or plugin
• 60723 Bug Fix memory size reset bug in VM wizard of new UI
• 60777 Bug Fix mat-option hover and focus having same styles in new UI
• 60792 Bug Add ability to remove certificate from Active Directory form of new UI
• 60930 Bug Replace links in tooltips that still point to internal User Guide
• 60936 Bug Fix bug in Init/Shutdown scripts create and edit modes
• 61107 Bug Allow promotion of datasets and zvols in new UI
• 61116 Bug Do not monitor disabled directory services
• 61188 Bug Add instructions for adding spare devices to an encrypted pool to Guide
• 61299 Bug Remove mention of dd mode for Rufus in Guide
• 61323 Bug Update “Replacing an Encrypted Disk” section of Guide
• 61404 Bug Ensure filesystem tree view is sorted by alphabetical order in new UI
• 61623 Bug Remove input restrictions on hosts allow and deny on SMB shares
• 61641 Bug Align pool data tree in new UI
• 61866 Bug Correct label and tooltip in VM Wizard
• 62001 Bug Fix bug in Import Disk when a pool is locked
• 62019 Bug Fix bhyve CVE-2018-17160
• 62028 Bug Set correct values for quotas in edit mode of new UI
• 62055 Bug Fix bad sendmail and host_hostname default for new iocage jails
• 62109 Bug Fix legend analytics causing endless loop if no data
• 62298 Bug Add support for externally signed certificates to FTP and S3 services
• 62334 Bug Massive refactor of iocage fstab
• 62343 Bug Address iocage fstab issues
• 62361 Bug Migrate users to ‘auto’ with iocage vnet_default_interface
• 62469 Bug Do not allow changing UUID of iocage plugin jail in new UI
• 62478 Bug Do not raise SSL invalid alert when SSL is not in use
• 62550 Bug Position and size tooltips in new UI to stay within margins
• 62574 Bug Accurately display certificate validity period
• 62604 Bug Fix iocage restart
• 62628 Bug Fix ffmpeg issue that prevented transcoding with Emby and Plex plugins
• 62712 Bug Improve description for VNC Wait to Boot field
• 62790 Bug Add overflow to content div on confirm dialogs within new UI
• 62880 Bug Allow devices to be viewed when VM is running in new UI
• 62892 Bug Disallow import or creation of certificates with key lengths less than 1024
• 62910 Bug Bug fix for nginx configuration file
• 62991 Bug Fix ownership of Sonnar and raddar paths to allow these plugins to update
• 63108 Bug Improve krb5.conf generation and fix some bugs for edge cases
• 63144 Bug Do not traceback when cloning a VM and snapshot does not exist
• 63225 Bug Fix installer recommended RAM message
• 63234 Bug Add Advanced Plugin Installation button to new UI
• 63306 Bug Destroy network related setup on iocage installation failure
• 63357 Bug Display disk size in boot pool attach screen of new UI
• 63360 Bug Make use of new middleware reporting of train descriptions in new UI
• 63378 Bug Fix MSDOSFS import bug
• 63402 Bug Use new CTL statistics API for iSCSI reporting graph
• 63468 Bug Fix AWS S3 Cloud Sync hostname resolving to s3.None.amazonaws.com
• 63477 Feature Add support for two new checkboxes for S3 Cloud Sync credentials to middleware
• 63483 Feature Add two new checkboxes for S3 Cloud Sync credentials to new UI
• 63513 Bug Test for None with iocage r[n]in filters
• 63522 Bug Catch iocage subprocess exception
• 63630 Bug Optimize background image in login screen of new UI
• 63636 Bug Delay initial check for updates til necessary values are filled in new UI
• 63639 Bug Fix traceback on alertservice.update
• 63693 Bug Use Added isReady to display pre-populated Jail Edit fields for iOS
• 63816 Bug Update base OpenSSL to 1.0.2q
• 63837 Bug Fix handling of LDAP error messages in Directory Service wizard
• 64005 Bug Use root-level dataset available size value instead of raw size in new UI
• 64071 Bug Update curl to 7.62.0
• 64080 Bug Fix ‘iocage fetch’ sorting
• 64089 Bug Clarify Start on Boot option in Guide
• 64215 Bug Fix trusted domain users/groups error message in legacy UI
• 64251 Bug Speed up pool.query for hundreds of datasets
• 64323 Bug Do not capitalize iocage fetch RELEASE for local directories or custom mirrors
• 64341 Bug Fix bug when creating additional iocage epair devices
• 64350 Bug Properly set MTU on all iocage vnet interfaces
• 64482 Bug Allow for spaces in snapshot names
• 64530 Bug Fix traceback when updating dataset in new UI
• 64557 Bug Clarify in Guide how plugins and jails are updated or upgraded from the CLI
• 64563 Bug Allow zvol creation in new UI without specifying the Block Size
• 64575 Bug Handle traceback when pool not found
• 64599 Bug Generate SMART config on manual service start
• 64647 Bug Fix mismatching RELEASEs being fetched and a couple other iocage bugs
• 64656 Bug Fix traceback when stopping a VM
• 64716 Bug Suppress default Netdata RAM usage warning
• 64728 Bug Correctly display available and used space for datasets in new UI
• 64764 Bug Clean up IPv4 field in legacy UI when DHCP is checked
• 64935 Bug Fix download link in Guide
• 65052 Bug Use correct permissions for /var/log/netdata/debug.log
• 65139 Bug Display VM’s VNC port number in new UI
• 65187 Bug Fix FreeBSD-EN-18:18.zfs
• 65205 Bug Accurately display ZFS vdev statistics in UI
• 65220 Bug Update plugins example in Guide so that it matches screenshot
• 65247 Feature Add “Date Created” column to Storage –> Snapshots of new UI
• 65376 Bug Allow middleware startup on low-performance boot devices
• 65544 Bug Do not start S3 service at boot if ‘Start Automatically’ is not checked
• 65949 Bug Allow Windows 10 and Server 2019 to pass security check during SMB connect
• 66033 Bug Add warning when using Manual Setup in legacy UI for volume creation
• 66048 Bug Improve validation error message for allowed iSCSI target name
• 66214 Bug Add visual row separation to pool list in new UI
• 66367 Bug Clean up bulk edit disk actions in new UI
• 66385 Bug New UI improvements for Safari
• 66709 Bug Use midclt to get alerts for freenas-debug
• 66880 Bug Fix dhclient network device flapping
• 66925 Bug Update Private Key tooltips in new UI
• 66981 Bug Prevent shell text from overflowing in new UI
• 66999 Bug Display applicable middleware error messages in new UI when adding or editing VM devices
• 67071 Bug Escape single quotes in media description of installer
• 67420 Bug Use entity-table for VM landing page
• 67510 Bug Do not require plugin name to exactly match MANIFEST name
• 67602 Bug Fix bug that prevented S3 service from starting
• 67618 Bug Only allow ASCII for email password
• 67701 Bug Return less verbose error if middleware is not running
• 67728 Feature Update to Samba 4.9.4
• 67762 Bug Fix rysnc validation bug
• 67827 Bug Remove spurious ws4py errors from debug log
• 67879 Bug Do not limit Replication Tasks listing in new UI
• 67944 Bug Make sure the required directory structure exists when creating a VM
• 68115 Bug Adjust color in Cron Jobs page of new UI
• 68187 Bug Grab entire contents of post-installation message when installing a plugin
• 68214 Bug Add support for Active Directory users to NFS mapall and maproot fields of new UI
• 68239 Bug Allow Active Directory users to pass NFS mapall or maproot validation
• 68277 Bug Report actual physical (compressed) L2ARC size in new UI
• 68293 Bug Prevent sharesec_reset from incorrectly adding owner and group entries to the ACLs of an SMB share
• 68430 Feature Add Time Machine over SMB support to new UI
• 68473 Feature Update ifconfig to display started virtual machine names in tap descriptions
• 68493 Bug Have middleware use description from trains.txt
• 68716 Bug Fix bug in Pool Manager filter disks action of new UI
• 68754 Bug Add IPv6 support to network.general.summary in middleware
• 68815 Bug Do not display error when changing from NFSv4 to NFSv3
• 68835 Feature Add support for Time Machine over SMB
• 68923 Bug Implement VM clone feature in new UI
• 69022 Bug Fix FreeBSD security advisories 19:03 through 19:05
• 69159 Bug Increase SQLite retry timeout to prevent locking on slow USB devices
• 69168 Bug Store zvol size value for use by new UI
• 69195 Bug Use host_hostname for jail hostname in new UI
• 69204 Bug Use default value of auto for vnet_default_interface in new UI
• 69339 Bug Add a semaphore for calls within the same connection
• 69409 Bug Enable rrdcached
• 69465 Bug Hide passwords from middleware core.get_jobs output
• 69501 Bug Fix bug that prevented attaching a disk to the boot pool using the new UI
• 69598 Bug Remove Microsoft Download Tool from Guide
• 69733 Bug Fix bug that prevented SMART tests scheduled at midnight from running
• 69744 Bug Update translation files with current strings
• 69771 Bug Do not have middleware require password or key file for SFTP Cloud Credential
• 69787 Bug Fix UPS shutdown logic
• 69814 Bug Fix condition where new UI column headers fail to load on page refresh of entity tables
• 69823 Bug Prevent invalid train changes in middleware update plugin
• 69825 Bug Fix TFTP listen host option
• 70606 Bug Fix remaining issues with listing snapshots in new UI
• 70624 Bug Handle VM errors gracefully in new UI
• 70626 Bug Fix traceback and delay of mDNS advertisement
• 70678 Bug Remove unnecessary vm.query calls to middleware
• 70896 Bug Prevent ZFSException from breaking jail API calls
• 71022 Bug Allow rollback of any snapshot but warn that rolling back an older snapshot removes all newer snapshots
• 71337 Bug Use a split instead of a regex to find the poolname for zvol blocksize
• 71435 Bug Do not traceback when size of locked pool is unknown
• 71699 Bug Document new plugin_schema key in Guide
• 71785 Bug Address Samba listen queue overflows and issues found in vfs_ixnas
• 72225 Bug Make rrdcached report rrdc_update failures as warnings
• 72433 Bug Firefox fix to prevent some click actions in new UI from causing a logout
• 72459 Bug Add two new checkboxes for S3 Cloud Sync credentials to legacy UI
• 72475 Bug Fix “Size” typo in Reporting ->ZFS section of new UI
• 72499 Bug Add filters to negate middlewared startswith and endswith filters
• 72777 Bug Bump copyright year in new UI to 2019
• 72795 Bug Create a default directory and give correct permission to Syncthing plugin
• 72984 Bug Fix SSSD ldb error
• 73110 Bug Fix integer math overflow in UMA hash_alloc() that prevented ARC from growing above 512GB
• 73155 Bug Fix traceback in new UI when editing dataset with reservation or quota containing a decimal
• 73191 Bug Bug fix for Dynamic DNS
• 73335 Bug Pull in FreeBSD fixes so that ESXi 6.7 does not force NFSv4 datastores to mount read-only
• 73792 Bug Merge FreeBSD-SA-19:01.syscall fix
• 73819 Bug Fix OpenSSL path
• 73975 Bug Improve exception handling for iocage listing
• 74199 Bug Add mlx5ib(4) driver to the build as module

Tickets can be viewed at the iXsystems & FreeNAS Redmine page.