Nodegrid Release Notes 5.10.16

Release July 26, 2024

Nodegrid Version 5.10.16

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

UEFI mode and Secure Boot must be disabled before downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded libarchive to v3.7.4 (CVE-2024-37407).

• Upgraded OpenSSH to v9.8p1 (CVE-2024-6387).

New Features and Enhancements

• Added support to Legrand Bi-Directional SFPs, Approved Networks OP-SFP-BX34-20 and OP-SFP-BX43-20.

Bug Fixes

• Fixed SFP bonding connection not detecting link partner down by enabling auto-negotiation by default.

• Fixed issue with export_settings where --plain-password not showing some password fields.

• Fixed forced speeds on switch ports of Gate SR and Bold SR.

• Fixed port enumeration issues in Net SR with Quad-USB adapter.

Release July 2, 2024

Nodegrid Version 5.10.15

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled before downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded git to v2.39.4 (CVE-2024-32002).

Bug Fixes

• Fixed SIM missing error on some versions of the M.2 expansion card hardware.

• Fixed unit being stuck on first boot after upgrade from Nodegrid version 5.6 or lower due to OpenSearch failing to initialize on IPv6-only networks.

• Fixed instances where switch-related processes show high CPU usage when the network card is not present in the NSR front slot.

• Fixed config checksum not showing changes when new files are created in a directory.

• Fixed cluster coordinator leasing excess licenses to peers.

• Fixed apply_settings handling the number of built-in USB ports incorrectly.

Release May 31, 2024

Nodegrid Version 5.10.14

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Bug Fixes

• Fixed admin user unable to login via console when “Fall back if Denied” is not selected for Kerberos Authentication

• Fixed Managed devices permissions screen not showing disabled devices

• Fixed auto APN selection for UK Vodafone APN

• Fixed discovery rules failures on ACS6000 and ACS8000 managed devices

• Fixed case where switch related processes show high CPU usage when network card is present in NSR back slot.
  

Release April 26, 2024

Nodegrid Version 5.10.13

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded FRR to v9.1 (CVE-2023-38406, CVE-2023-41361, CVE-2023-41360, CVE-2022-37032, CVE-2023-41359, CVE-2023-3748, CVE-2023-38407, CVE-2023-47235, CVE-2023-47234, CVE-2023-41909, CVE-2023-38802, CVE-2023-41358)

Bug Fixes

• Fixed manually restarting NetworkManager process

• Disabled some ZPE Cloud processes that ran in the background when ZPE Cloud is disabled

• Fixed issues with export/import settings on managed device types

• Fixed issues with Verizon APN registration

• Fixed diagnostic data failing when LDAP authentication server is configured

• Fixed usb_serial (FTDI) devices being wrongly detected as usb_sensor. Air Flow/Temperature and Dust devices will not be automatically detected and need to be manually configured

Release April 3, 2024

Nodegrid Version 5.10.12

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded lighttpd to v1.4.74 (CVE-2023-44487)

• Upgraded nghttp2 to v1.60.0 (CVE-2023-44487)

• Upgraded Firefox to v124.0.1 (CVE-2024-29943)

• Upgraded PyYAML to 6.0.1 (CVE-2020-1747, CVE-2020-14343)

New Features and Enhancements

• Support for "COM Port Control" protocol (RFC-2217)

• Enable USB Attached SCSI (UAS) support in kernel

Bug Fixes

• Erase BIOS/bootloader password when upgrading with “format partitions” option

• Fixed issues with IP Passthrough

• Fixed LLDP sometimes not starting in switch interfaces after boot

• Fixed segmentation fault error on manual restart of Network Manager process

• Added 13388.mcs ATT APN to APNs DB

• Fixed failure to read wireless modem information in some cases

• Fixed misleading events 160 and 161 generated on boot (“Search is unavailable” and “Search has been restored”)

• Do not restart network connections upon reconfiguration of another connection

• Fixed non-admin users unable to access MKS session of VM

• Fixed WAN/LAN interfaces information in Access :: Overview page

Release February 23, 2024

Nodegrid Version 5.10.11

Supported Products

Upgrading Instruction

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded libuv to v1.48.0 (CVE-2024-24806)

• Patched FreeRDP v2.11.0 (CVE-2024-22211)

• Patched xserver-xorg v1.20.14 (CVE-2023-6816)

New Features and Enhancements

• The VRRP keepalive file is now covered by Save Settings

• Added support to Static LAG for NSR Compute module's backplane ports

Bug Fixes

• Upgraded InnoDisk SSD microcode from version S17411i to version S21804i, fixing issues in the handling of block information

• Added Dashboard logs size control when Search Engine is irresponsive 

• Fixed OCP Menu opening on non-USB serial ports 

• Fixed API toolkit/files/execute issue when invalid executable is requested 

• PDU Austin Hughes: Fixed managing multiple outlets using SNMP protocol 

• ZPE Cloud:

  • Resolved supervisor errors causing false positive logs

Release January 26, 2024

Nodegrid Version 5.10.10

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded OpenSSH to v9.6p1 (CVE-2023-51385, CVE-2023-48795, CVE-2023-51384)

• Upgraded Apache2 to v2.4.58 (CVE-2023-31122, CVE-2023-43622)

• Upgraded dnsmasq to v2.89 (CVE-2022-0934, CVE-2023-28450)

• Upgraded libmodbus to v3.1.10 (CVE-2022-0367)

• Upgraded sqlite to v3.44.2 (CVE-2023-7104)

• Upgraded ffmpeg v6.1 (CVE-2023-47470)

• Upgraded vim to v9.0.2130 (CVE-2023-5535)

• Patched perl v5.30.1 (CVE-2023-47100)

• Patched qtbase v5.15 (CVE-2023-51714)

New Features and Enhancements

• LLDP support for bridge connections

Bug Fixes

• Fixed LTE Modem not connecting when using Verizon SIM card

• Fixed creation of bridge between one ethernet interface and one VLAN over bonding connection

• Fixed some API queries for DHCP returning error 500

• Fixed API endpoint system/toolkit/files/execute failing to execute CLI commands

• Fixed running a playbook via API in Central management

• Fixed “Interface” in VLAN connection being read-only

• Fixed LLDP settings being ignored when creating a bond interface

Release December 8, 2023

Nodegrid Version 5.10.9

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded Firefox to v121.0b5 (CVE-2023-49060)

• Upgraded OpenVPN to v2.6.8 (CVE-2023-46850)

• Upgraded samba to v4.18.8 (CVE-2023-3961)

• Upgraded crypto-js to v4.2.0 (CVE-2023-46316)

• Upgraded traceroute to v2.1.3 (CVE-2023-46316)

• Upgraded c-ares to v1.20.1 (CVE-2022-4904, CVE-2023-32067)

• Upgraded jansson to v2.14 (CVE-2020-36325)

• Upgraded json-c to v0.17 (CVE-2020-12762)

Bug Fixes

• System will drop old sessions and generate events in case the session table becomes full, preventing lock-out

• Added APN information for Telit Next SIM Cards to the APN database

• Fixed Virtual Machines application tab freezing with some browser extensions

• Fixed KVM Dongle “Virtual Media” option freezing the session

• Fixed SSH Keys displaying a space instead of “+” on “Generate Key Pair” for Managed Devices screen

• Fixed DNS not resolving when setting more than one IPv6 DNS server for a connection

• Fixed Discovery Rules to other Nodegrid devices not working when using Wireguard internal IP

• ZPE Cloud: Fixed IP address and Interface information not displayed on Device Details

Release November 10, 2023

Nodegrid Version 5.10.8

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• N/A

New Features and Enhancements

• N/A

Bug Fixes

• Fixed known issue from v5.10.7: Cellular usage data not uploaded to ZPE Cloud

Release November 03, 2023

Nodegrid Version 5.10.7

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded OpenSSL to v3.0.12 (CVE-2023-5363)

• Upgraded curl to v8.4.0 (CVE-2023-38545, CVE-2023-38546)

• Upgraded Firefox to v119.0b4 (CVE-2023-5168, CVE-2023-5172, CVE-2023-5174, CVE-2023-5175, CVE-2023-5176)

• Patched zLib v1.2.11 (CVE-2023-45853)

• Patched Linux kernel v5.15.106 (CVE-2023-45871)

• Patched Python v2.7.18 (CVE-2022-48565)

New Features and Enhancements

• Added support for Austin Hughes PDU with device type pdu_austin_hughes

• Upgraded pmacct to v1.7.8

• Improved firewall rules sanity checks to prevent bad configuration

Bug Fixes

• Fixed USB Passthrough Power Commands for pdu_cpi_serial

• Fixed “ifIndex” support in sFlow exporter

• Fixed discovery on console_server_opengear when serial ports have no label or are set to Environmental type

• Fixed device search combining boolean operators with field specifiers

• Fixed MiniSR and HiveSR switching back to Gateway profile after a format partitions upgrade

• Fixed support for EM7565 wireless modem with vid:pid 1199:90b1

Known Issues

• Cellular usage data is not being uploaded to ZPE Cloud

Release September 29, 2023

Nodegrid Version 5.10.6

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded lldpd v0.9.2 (CVE-2023-41910)

  • Patched json-c v0.15 (CVE-2021-32292)

  • Upgraded FreeRDP to v2.11.0 (CVE-2023-39352, CVE-2023-39353, CVE-2023-39356, CVE-2023-40181, CVE-2023-40186, CVE-2023-40188, CVE-2023-40567, CVE-2023-40569)

• Fixed password sent as username when authenticating TACACS+ with minor version 0 (CVE-2023-44037)

• Enhanced the performance of the 'show_settings' functionality for Managed Devices in the CLI

• Implemented a System Health check that conducts a comprehensive assessment of Nodegrid OS, generating events for issues such as SSD bad blocks or errors, elevated CPU or SSD temperatures, and more. This check is scheduled to run daily at 2:30 AM local time

• Support for ‘Ask during Login’ to Managed Devices’ KVM action

• Support for Telit SIM cards APN auto detection

• Support for Net SR M.2 Cellular Expansion Card v2 power cycle command

• Support for transient hostname setting via DHCP Option 12 

• Detect Aruba 6200F CX USB console as Serial automatically

• Improve resilience on connection to ZPE Cloud and Remote Access

• Change measurement process from SD-WAN to improve network connection

Bug Fixes

• Diagnostic Data wrongly masks cellular modem firmware version

• Data usage of inactive SIM card is never cleared

• Fixed cellular APN auto detection when SIM is registering

• Fixed TACACS+ V0_V1 authentication

• Fixed the Tracking::Network::Switch interface display of the Description field when the user does not have access to the admin group, but has permission to Track System Information

• Fixed ZPE Cloud Remote Access to allow VNC connection to Managed Devices

Release September 8, 2023

Nodegrid Version 5.10.5

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenVPN to v2.6.6

  • Patched Busybox v1.31.1 (CVE-2022-48174)

  • Patched Qemu v6.2.0 (CVE-2022-36648)

• Improved speed of “set” operations on CLI paths under /settings/devices

Bug Fixes

• Fixed potential but unconfirmed command injection vulnerabilities, potentially affecting several features.

Release August 25, 2023

Nodegrid Version 5.10.4

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenSSH to v9.3p2 (CVE-2023-38408)

  • Upgraded Firefox to v116.0.2 (CVE-2023-4056, CVE-2023-4057, CVE-2023-4058)

• Stricter security for external authentication servers: users in local admin group would always fallback to local authentication even if “Fallback if access denied” was not checked. This behavior is now only kept for console access

• Added validation to firewall/NAT rules to block deleting chains referenced by other rules, that would result in invalid configuration

Bug Fixes

• Fixed a remote code execution vulnerability affecting specific API endpoints. This vulnerability does not bypass authentication

• Fixed shutdown command in VMs to power off instead of just halting

• Fixed RADIUS protocol handling problems that could result in groups not being properly mapped in some cases

• Fixed bridge interfaces being restarted on changes to unrelated interfaces

• Fixed IP-passthrough feature with failover between 2 cellular connections

• Fixed “Similar Devices” Network Scan for device type console_server_opengear

• Fixed problems with SMS sending and whitelisting

Release August 4, 2023

Nodegrid Version 5.10.3

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.
UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 Nodegrid Versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded pam_tacplus to v1.7.0 (CVE-2020-27743)

• Added support for MSTP over switch LAG interfaces in NSR

• Added support for upgrade and downgrade directly from/to Nodegrid v3.2.54+

• Removed confirmation on CLI path “/settings/authorization/<group>/devices”

Bug Fixes

• Fixed upgrade failures when FIPS mode is enabled

• Fixed “show_settings /” command hanging when Cluster is enabled

• Fixed “Using unknown host key” warning on access of Managed Devices to show only once

• Fixed line-break when redirecting syslog entries to “Admin Session”

• Fixed updating VTI tunnel endpoints when the physical interface changes IP

• Fixed sFlow export with IPv6

• Fixed IS-IS packets getting dropped on switch ports in NSR Lite

• Fixed reset button to apply factory settings if pressed for more than 10s

• Fixed some Managed Devices SNMP OIDs disappearing on device rename

• Fixed blank page displayed if editing a Managed Device that is renamed in the background

• Fixed behavior when trying to delete protected entries on CLI paths “/settings/authorization/user/devices/”, “/settings/authentication/servers/”

Release July 5, 2023

Nodegrid Version 5.10.2

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenSSL to v3.0.9 (CVE-2023-2650)

  • Upgraded curl to v7.82 (CVE-2023-28322)

  • Upgraded Firefox to v114.0.2 (CVE-2023-32216, CVE-2023-34416, CVE-2023-34417)

• Added option to delete datalog of Managed Devices in WebUI

• Added “Power Cycle” option in WebUI for Cellular Modem (Network :: Wireless Modem :: Global)

Bug Fixes

• Fixed known issue: “ZPE Cloud “backup restore” feature is not compatible with this version”

• Accept “*” character in CSR validation for wildcard certificates

• Fixed issue which prevented the resetting of serial statistics on CLI

• Fixed issue which incorrectly displayed Managed Device status as “in-use” in some cases after renaming a device

• Fixed issue in Failover functionality after a cellular modem reboot or SIM swap

• Fixed TACACS+ handling of non-empty messages from server and to not send empty attributes to server

• Fixed sFlow configuration issues which prevented the configuration for cellular modem interfaces

• Fixed issue that impacted the enumeration of Ethernet interfaces on NSCP devices when USB Ethernet adapters when used

• Fixed issues which prevented “console” sessions from working for Managed Devices of type virtual_console_kvm

Release May 31, 2023

Nodegrid Version 5.10.1

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Added fallback IPs 192.168.163.10 and 192.168.164.10 to sfp0 and sfp1 ports (backplane0 and backplane1 in NSR) when device is reset to factory settings

• All “checkbox” values on API now accept any of: “true”, “false”, “yes”, “no”

• Improved performance of Managed Devices table

Bug Fixes

• Fixed CLI path behavior “/settings/wireless_modem/global/<channel>/firmware”

• Fixed import_settings of firewall rules potentially breaking connectivity

• Fixed case where SSO button or login banner would disappear from login page

• Fixed partially deleted connection preventing the creation of new ones

• Fixed USB appliance ports not showing in search results

• Fixed “disconnect” button for Bluetooth devices

• Ignore faulty “reset” button on some NSCP devices

• Fixed import/export settings of “settings/authorization/<group>/outlets/”

• Other miscellaneous fixes from v5.10.0 Beta testing

Known Issues

• ZPE Cloud “backup restore” feature is not compatible with this version.

Release May 12, 2023

Nodegrid Version 5.10.0-Beta

Supported Products

Upgrading Instructions

Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Upgrade from v4.x versions is only supported starting at v4.2.4.

Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Major open source packages versions (main ones listed only):

• Upgrades to several open-source packages, fixing critical and non-critical CVEs

• Improved hostname presentation on WebUI header and included device model

• Redesigned DHCP Tracking page, providing additional information on leases

• Added WPA3 support to hotspot connection

• New Wireless Modem diagnostic tool on Tracking :: Devices :: Wireless Modem

• Extended SFP EEPROM information on Tracking :: Network :: Switch Interfaces

• Added Manage and Info buttons to switch between device settings or info page

• Allow renaming of managed devices directly from settings page

• Added dropdown to Console button on Access to select Launch Local Application

• Reduced system installation iso file size by more than 20%

• Allow setting custom MAC address for bond and bridge interfaces

• New “Inherit Appliance Credentials” option on discovery rules for appliance ports

• New "Appliance Identifier" option on discovery rules to filter by appliance name

• Allow setting a custom default zoom on Access :: Map

• NSCP devices in gateway profile will enable ZPE Cloud by default

• Fixed system static firewall rules changes overriding dynamically-added rules

• Documentation moved to an updated and centralized page, available at https://docs.zpesystems.com

• Expanded Nodegrid integration libraries with Salt and Ansible, available at https://github.com/ZPESystems/

• Docker container supporting access to legacy managed devices that use Applets, including iLO 3 and Raritan Dominion KSX II. Available as external package not requiring virtualization license

• OpenWiFi Controller v2.8 available as external package