Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update 13.0-U6.3 ReleaseNotes.md - Quick resync with general announcement #3277

Merged
merged 1 commit into from
Nov 22, 2024
Merged

Update 13.0-U6.3 ReleaseNotes.md - Quick resync with general announcement #3277

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 14 additions & 1 deletion content/GettingStarted/COREReleaseNotes.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,12 +27,25 @@ weight: 3

iXsystems is pleased to release TrueNAS CORE 13.0-U6.3!

This is a maintenance release to address a few security concerns:
This is a maintenance release with important security updates.
It is recommended for all users of CORE and Enterprise running 13.x or previous software versions.
TrueNAS SCALE & SCALE Enterprise systems are not impacted.

* Resolve a vulnerability involving python deserialization ([CVE-2020-22083](https://github.com/advisories/GHSA-j66q-qmrc-89rx)).

* Address a security vulnerability with the jails system (iocage).

In addition to the included fixes included, additional vulnerabilities are identified related to iocage (A FreeBSD jail manager), which is the infrastructure component that operates both the Jails and the Plugins system on CORE.
This update includes a mitigation that ensures any systems not running jails or plugins are safe from the iocage vulnerability impact.

Because these vulnerabilities are architectural in nature and the iocage application has not been under active development for many years, it is unlikely to receive fixes related to these vulnerabilities.
Systems running Jails or Plugins are still be exposed to the iocage vulnerabilities.

Users who run 3rd party applications on TrueNAS are highly encouraged to upgrade to SCALE, which is actively supported and not impacted by any known vulnerabilities at this time.
As always, users are encouraged to follow [security best-practices](https://www.truenas.com/docs/solutions/optimizations/security/) to minimize the risk to your system and important data.

TrueNAS Enterprise 13.x users should schedule an update with [TrueNAS Support](https://www.ixsystems.com/support/truenas-arrays/).

## 13.0-U6.2
**July 3, 2024**

Expand Down
Loading