11.2-U6

4 minute read.

Last Modified 2024-03-25 09:01 EDT

September 17, 2019

The FreeNAS development team is pleased to announce the availability of the sixth update to FreeNAS 11.2. This bug fix release adds some operating system and ZFS fixes and addresses these security vulnerabilities:

FreeBSD-EN-19:12.tzdata
FreeBSD-EN-19:13.mds
FreeBSD-SA-19:09.iconv
FreeBSD-SA-19:10.ufs
FreeBSD-SA-19:11.cd_ioctl
FreeBSD-SA-19:12.telnet
FreeBSD-SA-19:13.pts
FreeBSD-SA-19:14.freebsd32
FreeBSD-SA-19:15.mqueuefs
FreeBSD-SA-19:16.bhyve
FreeBSD-SA-19:17.fd
FreeBSD-SA-19:18.bzip2
FreeBSD-SA-19:19.mldv2
FreeBSD-SA-19:20.bsnmp
FreeBSD-SA-19:21.bhyve
CVE-2019-10197
CVE 2019-3829
CVE 2019-3836

The iconik plugin has been added. More information about iconik, a getting started guide, and an offer for 300 free credits is available here.

The Amazon Cloud Drive provider has been removed from System > Cloud Credentials. See this rclone forum post about Amazon Drive for more details.

Users of 11.2 systems are encouraged to update to 11.2-U6 using the instructions in the Guide.

Known Impacts

The default ACL on new ‘Windows’ datasets was changed from:

owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
everyone@:rxaRc:fd:allow

to:

owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
everyone@::fd:allow

This means that world is no longer being granted read privileges by default on newly created SMB shares. If you need to add “read” to “world” on a newly-created dataset, you can run the command:

setfacl -m everyone@:rxaRc:fd:allow /mnt/path/to/dataset

Known Issues

OAuth Cloud Credentials support will be added to the new UI in 11.3. For 11.2-U6, the legacy UI can be used to automatically populate credentials for supported cloud providers.

The hubiC cloud service has suspended creation of new accounts.

The Mega cloud service is currently broken. The new version of rclone which fixes this will be available in 11.3.

As an edge case, if you install another instance of an already installed plugin and that plugin installation fails, the cleanup from the failure will also delete the dataset for the first installation of that plugin. As a workaround until this is fixed in 11.3, it is recommended that users wanting to install another version of an installed plugin perform the installation from the CLI, using the -k switch:

iocage fetch -P -n PLUGIN_NAME -k RESTOFPARAMS

Changelog

New Features

NAS-102234 Remove Amazon Cloud Drive as it is no longer supported by rclone
NAS-102786 Add iconik plugin

Improvements

NAS-100799 Fix new UI tooltip and Guide entry for Home Directory
NAS-101097 Clarify Amazon S3 Endpoint URL tooltip in new UI
NAS-101567 Add location of SSH keys to Guide
NAS-101737 Fix grammatical error in Sharing section of Guide
NAS-102057 Add link for manual update files to Guide
NAS-102104 Document limitations of SMB recycle bin when crossing dataset boundaries
NAS-102152 Emphasize that VMs should be powered on for snapshot task
NAS-102226 Provide error for DropBox restricted content
NAS-102229 Add checks for NFS overlapping networks
NAS-102258 Improve help text for SMB guest access
NAS-102326 Disable NT ACL support by default in vfs_noacl
NAS-102396 Clarify wording for hot spares in Guide
NAS-102505 Tighten security of default ACL in winacl reset
NAS-102515 Update GnuTLS to 3.6.8
NAS-102531 Merge in FreeBSD EN-19:12 to 19.13 and SA-19:09 to 19:21 fixes
NAS-102535 Backport some OS/ZFS bugfixes
NAS-102827 Improve Active Directory section of Guide
NAS-102865 Improve Replacing Disks to Grow a Pool section of Guide
NAS-102868 Remove 50% recommendation from ZFS Primer section of Guide
NAS-102897 Update trueview_stats.sh to increase length of network traffic polling interval
NAS-102912 Update Time Machine section of Guide
NAS-102919 Clarify text for “gone alert” emails when alert is cleared
NAS-102927 Use gitpython instead of dulwich for iocage
NAS-102929 Improve error messages when cloning/pulling iocage repo
NAS-102942 Clarify helptext for logical block size
NAS-103018 Update to Samba 4.9.13 to address CVE-2019-10197

Bug Fixes

NAS-100512 Fix missing variable which prevented some plugins from updating
NAS-101727 Fix JSON serialize errors being silently discarded
NAS-101899 Use correct name key in plugin manifests
NAS-102002 Update datastore list creation for Vmware snapshots in new UI
NAS-102144 Fix bug where an empty snapshot prevented adding an iSCSI extent
NAS-102231 Fixes for Microsoft OneDrive
NAS-102282 Generate stub smb4.conf prior to using net command
NAS-102295 Do not use HTTP URLs when using HTTPS
NAS-102451 Fix Box cloud sync provider not refreshing token
NAS-102579 Fix alert service schemas
NAS-102611 Ensure default iocage configuration exists
NAS-102634– Properly set permissions on recycle repositories containing macros
NAS-102636 Disable user/group caching when requested
NAS-102648 Add used LUN IDs to migration list
NAS-102649 Provide error message instead of traceback when update fails
NAS-102663 Properly apply NFS configuration changes
NAS-102698 Remove unused Slack “detailed” field
NAS-102715 Bug fix for netdata alarm script
NAS-102741 Revert back to MTU 1500 when no interface options are set
NAS-102789 Fix bug that prevented email alert on SMART errors
NAS-102803 Fix SES driver locking
NAS-102835 Fix “mountd: unknown user: DOMAINuser” error
NAS-102844 Fix error when disabling IPv6 for a jail
NAS-102874 Fix bug that prevented APIv1 from removing deleted group from /etc/groups
NAS-102928 Decouple listing plugins from fetching the plugins repo
NAS-102940 Fix crash on SCSI BUSY status during disk probe
NAS-102941 Properly restart iSCSI service on extent update
NAS-102958 Fix traceback when there is an error exporting a pool

Tickets can be viewed at our Open Issues page.