11.2-U5

September 17, 2019

The FreeNAS development team is pleased to announce the availability of the sixth update to FreeNAS 11.2. This bug fix release adds some operating system and ZFS fixes and addresses these security vulnerabilities:

• FreeBSD-EN-19:12.tzdata
• FreeBSD-EN-19:13.mds
• FreeBSD-SA-19:09.iconv
• FreeBSD-SA-19:10.ufs
• FreeBSD-SA-19:11.cd_ioctl
• FreeBSD-SA-19:12.telnet
• FreeBSD-SA-19:13.pts
• FreeBSD-SA-19:14.freebsd32
• FreeBSD-SA-19:15.mqueuefs
• FreeBSD-SA-19:16.bhyve
• FreeBSD-SA-19:17.fd
• FreeBSD-SA-19:18.bzip2
• FreeBSD-SA-19:19.mldv2
• FreeBSD-SA-19:20.bsnmp
• FreeBSD-SA-19:21.bhyve
• CVE-2019-10197
• CVE 2019-3829
• CVE 2019-3836

The iconik plugin has been added. More information about iconik, a getting started guide, and an offer for 300 free credits is available here.

The Amazon Cloud Drive provider has been removed from System > Cloud Credentials. See this rclone forum post about Amazon Drive for more details.

Users of 11.2 systems are encouraged to update to 11.2-U6 using the instructions in the Guide.

The default ACL on new ‘Windows’ datasets was changed from:

owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
everyone@:rxaRc:fd:allow

to:

owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
everyone@::fd:allow

This means that world is no longer being granted read privileges by default on newly created SMB shares. If you need to add “read” to “world” on a newly-created dataset, you can run the command:

setfacl -m everyone@:rxaRc:fd:allow /mnt/path/to/dataset

OAuth Cloud Credentials support will be added to the new UI in 11.3. For 11.2-U6, the legacy UI can be used to automatically populate credentials for supported cloud providers.

The hubiC cloud service has suspended creation of new accounts.

The Mega cloud service is currently broken. The new version of rclone which fixes this will be available in 11.3.

As an edge case, if you install another instance of an already installed plugin and that plugin installation fails, the cleanup from the failure will also delete the dataset for the first installation of that plugin. As a workaround until this is fixed in 11.3, it is recommended that users wanting to install another version of an installed plugin perform the installation from the CLI, using the -k switch:

iocage fetch -P -n PLUGIN_NAME -k RESTOFPARAMS

• NAS-102234 Remove Amazon Cloud Drive as it is no longer supported by rclone
• NAS-102786 Add iconik plugin Improvements
• NAS-100799 Fix new UI tooltip and Guide entry for Home Directory
• NAS-101097 Clarify Amazon S3 Endpoint URL tooltip in new UI
• NAS-101567 Add location of SSH keys to Guide
• NAS-101737 Fix grammatical error in Sharing section of Guide
• NAS-102057 Add link for manual update files to Guide
• NAS-102104 Document limitations of SMB recycle bin when crossing dataset boundaries
• NAS-102152 Emphasize that VMs should be powered on for snapshot task
• NAS-102226 Provide error for DropBox restricted content
• NAS-102229 Add checks for NFS overlapping networks
• NAS-102258 Improve help text for SMB guest access
• NAS-102326 Disable NT ACL support by default in vfs_noacl
• NAS-102396 Clarify wording for hot spares in Guide
• NAS-102505 Tighten security of default ACL in winacl reset
• NAS-102515 Update GnuTLS to 3.6.8
• NAS-102531 Merge in FreeBSD EN-19:12 to 19.13 and SA-19:09 to 19:21 fixes
• NAS-102535 Backport some OS/ZFS bugfixes
• NAS-102827 Improve Active Directory section of Guide
• NAS-102865 Improve Replacing Disks to Grow a Pool section of Guide
• NAS-102868 Remove 50% recommendation from ZFS Primer section of Guide
• NAS-102897 Update trueview_stats.sh to increase length of network traffic polling interval
• NAS-102912 Update Time Machine section of Guide
• NAS-102919 Clarify text for “gone alert” emails when alert is cleared
• NAS-102927 Use gitpython instead of dulwich for iocage
• NAS-102929 Improve error messages when cloning/pulling iocage repo
• NAS-102942 Clarify helptext for logical block size
• NAS-103018 Update to Samba 4.9.13 to address CVE-2019-10197

• NAS-100512 Fix missing variable which prevented some plugins from updating
• NAS-101727 Fix JSON serialize errors being silently discarded
• NAS-101899 Use correct name key in plugin manifests
• NAS-102002 Update datastore list creation for Vmware snapshots in new UI
• NAS-102144 Fix bug where an empty snapshot prevented adding an iSCSI extent
• NAS-102231 Fixes for Microsoft OneDrive
• NAS-102282 Generate stub smb4.conf prior to using net command
• NAS-102295 Do not use HTTP URLs when using HTTPS
• NAS-102451 Fix Box cloud sync provider not refreshing token
• NAS-102579 Fix alert service schemas
• NAS-102611 Ensure default iocage configuration exists
• NAS-102634– Properly set permissions on recycle repositories containing macros
• NAS-102636 Disable user/group caching when requested
• NAS-102648 Add used LUN IDs to migration list
• NAS-102649 Provide error message instead of traceback when update fails
• NAS-102663 Properly apply NFS configuration changes
• NAS-102698 Remove unused Slack “detailed” field
• NAS-102715 Bug fix for netdata alarm script
• NAS-102741 Revert back to MTU 1500 when no interface options are set
• NAS-102789 Fix bug that prevented email alert on SMART errors
• NAS-102803 Fix SES driver locking
• NAS-102835 Fix “mountd: unknown user: DOMAINuser” error
• NAS-102844 Fix error when disabling IPv6 for a jail
• NAS-102874 Fix bug that prevented APIv1 from removing deleted group from /etc/groups
• NAS-102928 Decouple listing plugins from fetching the plugins repo
• NAS-102940 Fix crash on SCSI BUSY status during disk probe
• NAS-102941 Properly restart iSCSI service on extent update
• NAS-102958 Fix traceback when there is an error exporting a pool

Tickets can be viewed at our Open Issues page.