Skip to content

Commit

Permalink
Update COREReleaseNotes.md - Quick resync with general announcement (#…
Browse files Browse the repository at this point in the history
  • Loading branch information
Mrt134 authored Nov 22, 2024
1 parent f2d7952 commit 07a3731
Showing 1 changed file with 14 additions and 1 deletion.
15 changes: 14 additions & 1 deletion content/GettingStarted/COREReleaseNotes.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,12 +27,25 @@ weight: 3

iXsystems is pleased to release TrueNAS CORE 13.0-U6.3!

This is a maintenance release to address a few security concerns:
This is a maintenance release with important security updates.
It is recommended for all users of CORE and Enterprise running 13.x or previous software versions.
TrueNAS SCALE & SCALE Enterprise systems are not impacted.

* Resolve a vulnerability involving python deserialization ([CVE-2020-22083](https://github.com/advisories/GHSA-j66q-qmrc-89rx)).

* Address a security vulnerability with the jails system (iocage).

In addition to the included fixes included, additional vulnerabilities are identified related to iocage (A FreeBSD jail manager), which is the infrastructure component that operates both the Jails and the Plugins system on CORE.
This update includes a mitigation that ensures any systems not running jails or plugins are safe from the iocage vulnerability impact.

Because these vulnerabilities are architectural in nature and the iocage application has not been under active development for many years, it is unlikely to receive fixes related to these vulnerabilities.
Systems running Jails or Plugins are still be exposed to the iocage vulnerabilities.

Users who run 3rd party applications on TrueNAS are highly encouraged to upgrade to SCALE, which is actively supported and not impacted by any known vulnerabilities at this time.
As always, users are encouraged to follow [security best-practices](https://www.truenas.com/docs/solutions/optimizations/security/) to minimize the risk to your system and important data.

TrueNAS Enterprise 13.x users should schedule an update with [TrueNAS Support](https://www.ixsystems.com/support/truenas-arrays/).

## 13.0-U6.2
**July 3, 2024**

Expand Down

0 comments on commit 07a3731

Please sign in to comment.