Nodegrid Platform Release Notes - Version 5.8

Nodegrid 5.8.22 Release

Release January 31, 2025

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, Network Boot, and ZPE Cloud are supported.

• UEFI mode and Secure Boot must be disabled before downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for Nodegrid Serial Console devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded rsync to v3.4.0 (CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747).

• Upgraded Firefox to v133.0.3 (CVE-2024-10458, CVE-2024-10459, CVE-2024-10466, CVE-2024-10467).

• Upgraded libarchive to v3.7.7 (CVE-2024-48957, CVE-2024-48958).

• Upgraded iperf3 to v3.17.1 (CVE-2023-38403).

• Upgraded libsdl2 to v2.30.7 (CVE-2024-24974).

• Upgraded yajl-ruby to v1.4.3 (CVE-2022-24795).

• Upgraded syslog-ng to v3.38.1 (CVE-2022-38725).

• Upgraded runc-docker to v1.1.12 (CVE-2022-29162, CVE-2023-27561, CVE-2023-28642, CVE-2024-21626).

• Upgraded qatzip to v1.1.2 (CVE-2022-3636).

• Upgraded libvncserver to v0.9.14 (CVE-2020-29260).

• Upgraded grub to v2.12 (CVE-2020-14372, CVE-2020-27779).

• Upgraded glib-2.0 to v2.78.4 (CVE-2023-29499).

• Upgraded dnsmasq to v2.90 (CVE-2023-50387).

• Upgraded containerd-opencontainers to v1.7.5 (CVE-2023-25173).

• Upgraded Linux kernel to v5.15.169.

• Patched pam-radius v1.4.0 (CVE-2015-9542).

• Patched wpa-supplicant v2.10 (CVE-2024-5290).

New Features and Enhancements

• SSD Microcode upgrade for Nodegrid Serial Console Hardware Platform:

  • Apacer SSD: Upgrade from versions SFMA10A3, SFMA10A4, and SFMA10A5 to SFMA10A6 or SFMA11A6.

• Added --force and --quiet options to the delete command in CLI.

Bug Fixes

• Fixed situations that could lead to multiple opensearch processes running and consuming significant system resources.

• Fixed API endpoint devices/discovery/rules not updating fields appliance_identifier and lookup_pattern.

• Fixed bootloader password protection feature for systems in UEFI mode.

• Fixed the issue with NAT changepolicy API endpoint. Updated the /security/nat_changepolicy endpoint to accept an array in the PUT for modifying multiple NAT policies.

• Fixed apache access_log file growing indefinitely.

• Fixed some situations where a peer removed from a cluster would not be able to re-join.

Nodegrid 5.8.21 Release

Release October 11, 2024

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled before downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for Nodegrid Serial Console devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded krb5 to v1.21.3 (CVE-2024-37371)

• Upgraded bind to v9.18.24, readline to v8.1.2 (CVE-2023-2828, CVE-2023-3341)

• Upgraded Firefox to v130.0 (CVE-2024-8381, CVE-2024-8384, CVE-2024-8385, CVE-2024-7519)

• Upgraded expat to v2.6.3 (CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2022-43680, CVE-2023-52425)

• Upgraded sudo to v1.9.15p5 (CVE-2023-22809, CVE-2022-43995, CVE-2023-42465)

• Upgraded ruby to v3.2.2 & fluentd to v1.15.3 (CVE-2021-33621)

• Upgraded qtbase to v5.15.9 (CVE-2023-32763)

• Upgrade python3-urllib3 to v1.26.18 (CVE-2023-45803)

• Upgraded and patched python3 to v3.10.13 (CVE-2022-42919, CVE-2020-10735, CVE-2024-7592, CVE-2024-6232, CVE-2023-27043)

• Upgraded perl to v5.38.2 (CVE-2023-31486, CVE-2023-47039)

• Upgraded libxml2 to v2.9.14 (CVE-2022-23308, CVE-2022-40303, CVE-2022-40304, CVE-2024-25062)

• Upgraded Libreswan to v4.12 (CVE-2023-30570)

• Upgraded jspdf to v2.5.1 (CVE-2021-23353)

• Upgraded tiff to v4.6.0 (CVE-2023-52355, CVE-2023-52356)

• Upgraded QEMU to v7.1.0 (CVE-2021-3750, CVE-2022-2962, CVE-2022-3872, CVE-2023-0664, CVE-2023-1386, CVE-2023-2680, CVE-2023-2861, CVE-2023-3354, CVE-2023-5088)

• Upgraded libarchive to v3.7.4 (CVE-2024-37407)

• Upgraded OpenSSH to v9.8p1 (CVE-2024-6387)

• Upgraded wget to v1.24.5 and patched CVE-2024-38428

• Upgraded vim to v9.1.0648 (CVE-2024-41957, CVE-2024-41965)

• Upgraded libyang to v2.1.55 (CVE-2023-26917)

• Upgraded gnutls to v3.8.4 (CVE-2024-0553, CVE-2024-0567)

• Upgraded DHCP to v4.4.3-P1 (CVE-2022-2928, CVE-2022-2929)

• Upgraded cifs-utils to v7.0 (CVE-2020-14342, CVE-2022-27239, CVE-2023-29491)

• Patched Linux Kernel (CVE-2024-42154)

• Patched iperf3 v3.7 (CVE-2023-38403)

New Features and Enhancements

• SSD Microcode upgrade for Nodegrid Serial Console Hardware Platform:

  • InnoDisk SSD: Upgrade from version S17411i to S21804i

• Added support to Legrand Bi-Directional SFPs, Approved Networks OP-SFP-BX34-20 and OP-SFP-BX43-20.

Bug Fixes

• Fixed "SIM missing" error on some versions of the M.2 expansion card hardware.

• Fixed some network event dispatchers getting locked when DNS requests are blocked.

• Fixed export_settings --plain-password not showing some password fields.

• Fixed forced speeds on switch ports of GSR and BSR.

• Fixed issues with import_settings of hostname detection probes

• Fixed port enumeration issues in NetSR with Quad-USB adapter.

• Fixed config checksum not showing changes when new files are created in a directory.

• Fix pdu_servertech SSH discovery of outlets with a dot in the name.

• Fixed WiFi client connection to WPA1 and TKIP wireless networks.

Nodegrid 5.8.19 Release

Release June 12, 2024

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled before downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for Nodegrid Serial Console devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded FRR to v9.1 (CVE-2023-38406, CVE-2023-41361, CVE-2023-41360, CVE-2022-37032, CVE-2023-41359, CVE-2023-3748, CVE-2023-38407, CVE-2023 47235, CVE-2023-47234, CVE-2023-41909, CVE-2023-38802, CVE-2023-41358)

• Upgraded ReportLab to v3.5.46 (CVE-2019-19450, CVE-2019-17626)

• Upgraded git to v2.39.4 (CVE-2024-32002)

• Patched pycrypto v2.6.1 (CVE-2013-7459)

Bug Fixes

• Fixed unit not responding on the first boot after upgrade from v5.6 or lower due to OpenSearch failing to initialize on IPv6-only networks.

• Fixed switch-related processes showing high CPU usage when the network card is present in the NSR back slot.

• Fixed discovery rules failures on ACS6000 and ACS8000 managed devices.

• Fixed auto APN selection for UK Vodafone APN.

• Fixed issues with IP Passthrough.

• Fixed usb_serial (FTDI) devices being wrongly detected as usb_sensor. Air Flow/Temperature and Dust devices will not be automatically detected and need to be manually configured.

• Fixed SSH keys not working when Radius is configured and unavailable.

• Fixed apply_settings handling the number of built-in USB ports incorrectly.

• Fixed cluster coordinator leasing excess licenses to peers.

• Fixed the issue when an administrator could not log in via console if Fallback if Denied is not selected after configuring Kerberos authentication.

• Fixed Managed devices permissions screen not showing disabled devices.

• Fixed issues with export/import settings on managed device types.

• Fixed diagnostic data failing when the LDAP authentication server is configured.

• Fixed LTE issues with Verizon APN registration.

• Fixed manually restarting NetworkManager process.

• ZPE Cloud- Fixed issue where devices were unable to immediately reconnect to ZPE Cloud after error on the server-side connection, delaying the reconnection by 10 minutes.

Nodegrid 5.8.18 Release

Release March 15, 2024

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded OpenSSH to v9.6p1 (CVE-2023-51385, CVE-2023-48795, CVE-2023-51384)

• Upgraded libmodbus to v3.1.10 (CVE-2022-0367)

• Upgrade Apache2 to v2.4.58 (CVE-2023-31122, CVE-2023-43622)

• Upgraded dnsmasq to v2.89 (CVE-2022-0934, CVE-2023-28450)

• Upgraded libuv to v1.48.0 (CVE-2024-24806)

• Upgraded sqlite to v3.44.2 (CVE-2023-7104)

• Upgraded ffmpeg to v6.1 (CVE-2023-47470)

• Upgraded PyYAML to v6.0.1 (CVE-2020-1747, CVE-2020-14343)

• Patched FreeRDP v2.11.0 (CVE-2024-22211)

• Patched linux-kernel v6.1.57 (CVE-2023-5178)

• Patched qtbase v5.15 (CVE-2023-51714)

• Patched glibc v2.31 (CVE-2023-4813, CVE-2023-4911)

• Patched xserver-xorg v1.20.14 (CVE-2023-6816)

• Patched perl v5.30.1 (CVE-2023-47100)

• Patched python3-certifi v2021.10.8 (CVE-2023-37920, CVE-2022-23491)

New Features and Enhancements

• Enable USB Attached SCSI (UAS) support in kernel

• New “Inherit Appliance Credentials” option on discovery rules for appliance ports

• New "Appliance Identifier" option on discovery rules to filter by appliance name

• Added LLDP support to bridge connection

Bug Fixes

• Generate event device up/down after reconfiguration of mode from on-demand to enabled

• Erase BIOS/bootloader password when upgrading with “format partitions” option

• Fixed failure to connect via Telnet to Nodegrid Serial Ports using Port IP Alias

• Fixed LLDP sometimes not starting in switch interfaces after boot

• Fixed “segmentation fault” error when restarting NetworkManager

• Added 13388.mcs ATT APN to APNs DB

• Fixed memory leak in zpe-mibd process

• Fixed import_settings error on field “ethernet_interface” of network connections

• Fixed error on API endpoint toolkit/files/execute when executing invalid script

• Fixed resource leaks related to reading wireless modem tracking information

• Fixed EM7565 context table for Verizon when SIM couldn't register

• Allow bridges with VLAN slave with parent bonding connection

• Fixed IP Passthrough renew process not working during failover

• Fixed running playbooks on API

• Fixed LLDP settings not saved when creating bond interface

Nodegrid 5.8.17 Release

Release December 13, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security Fixes

• Upgraded Firefox to v121.0b5 (CVE-2023-49060)

• Upgraded OpenVPN to v2.6.8 (CVE-2023-46850)

• Upgraded samba to v4.18.8 (CVE-2023-3961)

• Upgraded crypto-js to v4.2.0 (CVE-2023-46316)

• Upgraded traceroute to v2.1.3 (CVE-2023-46316)

• Upgraded c-ares to v1.20.1 (CVE-2022-4904, CVE-2023-32067)

• Upgraded jansson to v2.14 (CVE-2020-36325)

• Upgraded json-c to v0.17 (CVE-2020-12762)

  New Features and Enhancements

• Implemented a System Health check that conducts a comprehensive assessment of Nodegrid OS, generating events for issues such as SSD bad blocks or errors, elevated CPU or SSD temperatures, and more. This check is scheduled to run daily at 2:30 AM local time

  Bug Fixes

• System will drop old sessions and generate events in case the session table becomes full, preventing lock-out

• Added APN information for Telit Next SIM Cards to the APN database

• Fixed Virtual Machines application tab freezing with some browser extensions

• Fixed KVM Dongle “Virtual Media” option freezing the session

• Fixed SSH Keys displaying a space instead of “+” on “Generate Key Pair” for Managed Devices screen

• Fixed Discovery Rules to other Nodegrid devices not working when using Wireguard internal IP

• ZPE Cloud: Fixed IP address and Interface information not displayed on Device Details

Nodegrid Version 5.8.16

Release November 10, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security fixes

N/A

New Features and Enhancements

N/A

Bug Fixes

• Fixed known issue from v5.8.15: Cellular usage data not uploaded to ZPE Cloud

Nodegrid Version 5.8.15

Release November 03, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4 versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

Security fixes

1. Upgraded OpenSSL to v3.0.12 (CVE-2023-5363)

2. Upgraded curl to v8.4.0 (CVE-2023-38545, CVE-2023-38546)

3. Upgraded Firefox to v119.0b4 (CVE-2023-5168, CVE-2023-5172, CVE-2023-5174, CVE-2023-5175, CVE-2023-5176)

4. Patched zLib v1.2.11 (CVE-2023-45853)

5. Patched Linux kernel v5.15.94 (CVE-2023-45871)

6. Patched Python v2.7.18 (CVE-2022-48565)

New Features

• Added support for Austin Hughes PDU with device type pdu_austin_hughes

Bug Fixes

• Fixed USB Passthrough Power Commands for pdu_cpi_serial

• Fixed discovery on console_server_opengear when serial ports have no label or are set to Environmental type

• Fixed device search combining boolean operators with field specifiers

• Fixed MiniSR and HiveSR switching back to Gateway profile after a format partitions upgrade

• Fixed support for EM7565 wireless modem with vid:pid 1199:90b1

Known Issues

• Cellular usage data is not being uploaded to ZPE Cloud

Nodegrid Version 5.8.14

Release September 29, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded lldpd v0.9.2 (CVE-2023-41910)

  • Patched json-c v0.15 (CVE-2021-32292)

  • Upgraded FreeRDP to v2.11.0 (CVE-2023-39352, CVE-2023-39353, CVE-2023-39356, CVE-2023-40181, CVE-2023-40186, CVE-2023-40188, CVE-2023-40567, CVE-2023-40569)

• Fixed password sent as username when authenticating TACACS+ with minor version 0 (CVE-2023-44037)

• Enhanced the performance of the 'show_settings' functionality for Managed Devices in the CLI

• Support for ‘Ask during Login’ to Managed Devices’ KVM action

• Support for Telit SIM cards APN auto detection

• Support for Net SR M.2 Cellular Expansion Card v2 power cycle command

• Support for transient hostname setting via DHCP Option 12

• Detect Aruba 6200F CX USB console as Serial automatically

• Improve resilience on connection to ZPE Cloud and Remote Access

• Change measurement process from SD-WAN to improve network connection

• Improve resilience on connection to ZPE Cloud and Remote Access

• Change measurement process from SD-WAN to improve network connection

Bug Fixes

• Diagnostic Data wrongly masks cellular modem firmware version

• Data usage of inactive SIM card is never cleared

• Fixed cellular APN auto detection when SIM is registering

• Fixed TACACS+ V0_V1 authentication

• Fixed the Tracking::Network::Switch interface display of the Description field when the user does not have access to the admin group, but has permission to Track System Information

• Fixed ZPE Cloud Remote Access to allow VNC connection to Managed Devices

Nodegrid Version 5.8.13

Release September 8, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenVPN to v2.6.6

  • Patched Busybox v1.31.1 (CVE-2022-48174)

  • Patched Qemu v6.2.0 (CVE-2022-36648)

• Improved speed of “set” operations on CLI paths under /settings/devices

Bug Fixes

• Fixed potential but unconfirmed command injection vulnerabilities, potentially affecting several features

Nodegrid Version 5.8.12

Release August 25, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Stricter security for external authentication servers: users in local admin group would always fallback to local authentication even if “Fallback if access denied” was not checked. This behavior is now only kept for console access

• Added validation to firewall/NAT rules to block deleting chains referenced by other rules, that would result in invalid configuration

Bug Fixes

• Fixed shutdown command in VMs to power off instead of just halting

• Fixed RADIUS protocol handling problems that could result in groups not being properly mapped in some cases

• Fixed bridge interfaces being restarted on changes to unrelated interfaces

• Fixed IP-passthrough feature with failover between 2 cellular connections

• Fixed “Similar Devices” Network Scan for device type console_server_opengear

• Fixed problems with SMS sending and whitelisting

Nodegrid Version 5.8.11

Release August 11, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenSSH to v9.3p2 (CVE-2023-38408)

  • Upgraded Firefox to v116.0.2 (CVE-2023-4056, CVE-2023-4057, CVE-2023-4058)

Bug Fixes

• Fixed a remote code execution vulnerability affecting specific API endpoints. This vulnerability does not bypass authentication.

Nodegrid Version 5.8.10

Release August 04, 2023

Supported Products

Upgrading Instructions

• Upgrade methods from Web Interface, CLI, USB, and Network Boot are supported.

• UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

• Upgrade from v4.x versions is only supported starting at v4.2.4.

• Upgrade from v3 versions is only supported for NSC devices at v3.2.54 and will erase existing data in /var directory.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded Firefox to v114.0.2 (CVE-2023-34417, CVE-2023-34416, CVE-2023-32216)

  • Upgraded pam_tacplus to v1.7.0 (CVE-2020-27743)

• Added support for MSTP over switch LAG interfaces in NSR

• Added support for upgrade and downgrade directly from/to Nodegrid v3.2.54+

• Removed confirmation on CLI path “/settings/authorization/<group>/devices”

Bug Fixes

• Fixed upgrade failures when FIPS mode is enabled

• Fixed “show_settings /” command hanging when Cluster is enabled

• Fixed “Using unknown host key” warning on access of Managed Devices to show only once

• Fixed line-break when redirecting syslog entries to “Admin Session”

• Fixed updating VTI tunnel endpoints when the physical interface changes IP

• Fixed sFlow export with IPv6

• Fixed IS-IS packets getting dropped on switch ports in NSR Lite

• Fixed reset button to apply factory settings if pressed for more than 10s

• Fixed some Managed Devices SNMP OIDs disappearing on device rename

• Fixed blank page displayed if editing a Managed Device that is renamed in the background

• Fixed behavior when trying to delete protected entries on CLI paths “/settings/authorization/user/devices/”, “/settings/authentication/servers/”

Nodegrid Version 5.8.9

Release June 30, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.9.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenSSL to v3.0.9 (CVE-2023-2650)

  • Upgraded curl to v7.82 (CVE-2023-28322)

• Added option to delete datalog of Managed Devices in WebUI

• Added “Power Cycle” option in Network :: Wireless Modem :: Global

Bug Fixes

• Accept “*” character in CSR validation for wildcard certificates

• Fixed resetting serial statistics on CLI

• Fixed Managed Device status improperly “in-use” in some cases after renaming

• Fixed failover issues involving modem reboot and SIM swap

• Fixed TACACS+ handling of non-empty messages from server and to not send empty attributes to server

• Fixed sFlow configuration for cellular modem interfaces

• Fixed issue that could cause Ethernet interfaces to be swapped on boot with USB Ethernet interfaces on NSCP devices

• Fixed “console” button for VM Managed Devices of type virtual_console_kvm

Known Issues

• Upgrading to this version using Network Boot from GRUB menu is not supported

Nodegrid Version 5.8.8

Release May 26, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.8.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Added fallback IPs 192.168.163.10 and 192.168.164.10 to sfp0 and sfp1 ports (backplane0 and backplane1 in NSR) when device is reset to factory settings

• All “checkbox” values on API now accept any of: “true”, “false”, “yes”, “no”

• Docker container supporting access to legacy managed devices that use Applets, including iLO 3 and Raritan Dominion KSX II. Available as external package not requiring virtualization license

• NSCP devices in gateway profile will enable ZPE Cloud by default

Bug Fixes

• Fixed CLI path behavior “/settings/wireless_modem/global/<channel>/firmware”

• Fixed import_settings of firewall rules potentially breaking connectivity

• Fixed case where SSO button or login banner would disappear from login page

• Fixed failover on tertiary connection not failing-back to secondary

• Fixed partially deleted connection preventing the creation of new ones

• Fixed cluster issues after direct upgrade from v5.2

• Fixed USB appliance ports not showing in search results

• Fixed “disconnect” button for Bluetooth devices

• Ignore faulty “reset” button on some NSCP devices

• Fixed import/export settings of “settings/authorization/<group>/outlets/”

• Allow setting “Forward Delay” to 0 for bridge interfaces when STP is disabled

• ZPE Cloud: Fixed access to Nodegrid’s “Applications” tabs

Nodegrid Version 5.8.7

Release April 28, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.7.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Patched curl v7.69 (CVE-2023-27536)

• Added more Privacy and Encryption Algorithms to SNMPv3 Traps configuration

• Disabled “Change password” screen for remote users

• Updated CLI and API endpoints to remove special characters. Existing CLI and API endpoints can still be used but might be removed in future versions

• ZPE Cloud: Expanded device data resynchronization capabilities

Bug Fixes

• Reduced disk space needed for upgrade process, avoiding errors on devices with 16GB disk (MSR, HSR, LSR)

• Fixed “Sender” field of “Auditing :: Destinations :: Email :: Sender :: Test email” to set the “From” email field

• Fixed WebUI becoming unresponsive when pop-ups are blocked by the browser

• ZPE Cloud: Fixed device getting offline on some bonding interface configurations

Nodegrid Version 5.8.6

Release March 31, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.6.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded Linux kernel to v5.15.94

  • Upgraded Apache to v2.4.56 (CVE-2023-25690)

  • Patched samba v4.14.14 (CVE-2022-45141)

• New managed device type switch_zpe for ZSW-228P and ZSW-228PP

• Support TOTP/HOTP for remote users

• Improved “add-on” presentation on system/slots API endpoint

Bug Fixes

• Fixed specific concurrent configuration commands potentially corrupting inittab, causing boot process to be interrupted with “Runlevel” prompt

• Fixed situation that prevented adding static routes from the UI

• Fixed SNMP OID IF-MIB::ifDescr for NSR network card in slot 3

• Fixed UI hanging in some cases of Cluster failures

• Present hotspot SSID/BSSID as plain text instead of as a masked password

• Fixed edit of firewall rules on UI breaking when disk is full

• Fixed Custom Fields displaying %2e instead of . (dot)

Nodegrid Version 5.8.5

Release March 15, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.5.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• N/A

Bug Fixes

• Fixed Managed Device monitoring known issue from 5.8.3

• Fixed SAML integration with OneLogin IDP

Nodegrid Version 5.8.3

Release February 24, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.3.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Main open source packages security upgrades and patches:

  • Upgraded OpenSSL to v3.0.8 (CVE-2023-0286)

  • Upgraded Firefox to v110.0 (CVE-2022-45406, CVE-2022-46882)

  • Upgraded git to v2.35.6 (CVE-2022-23521, CVE-2022-41903)

  • Upgraded fluentd to v1.15.3 (CVE-2022-39379)

  • Patched Linux kernel v5.15.52 (CVE-2022-47939)

  • Patched Python v3.10.6 (CVE-2022-37454, CVE-2022-45061)

  • Patched libpam v1.3.1 (CVE-2022-28321)

  • Patched curl v7.69.1 (CVE-2022-32221)

  • Patched libarchive v3.4.2 (CVE-2022-36227)

• Support for new BSR model with USB Passthrough support

• Added entry on USB installer to install Pre-Boot Authentication environment

• Support API, CLI, and Cluster access for managed device switch_edgecore

• Support for Multi-Factor Authentication with TOTP and HOTP

• Support for API key authentication instead of session tickets for API accounts

• Support Agent Circuit ID and Hostname assignment (Option 12) on DHCP server

• Improved performance of Network Connections list page

• Support configuring Ageing-Time property for network bridges

Bug Fixes

• Fixed increasing memory consumption of CCM process over repeated API calls

• Fixed situation causing telnet sessions to leave hanging processes

• Fixed upgrade failure when using non-ethernet connection

• Fixed Overview page mixing WAN and LAN in MiniSR

• Fixed blank page on Dashboard :: Discover

• Fixed large amount of OpenSearch logs on /var/os/logs

• Disable NFS v2 and v3 lock monitoring when disabling RPC service

• Fixed import_settings not fully updating wireguard peers and other pages

• Fixed creation of IPv6 DHCP Host

• Fixed access for discovered usbSXX ports of Console Server Nodegrid

• ZPE Cloud: fixed backup failures

• ZPE Cloud: fixed Remote Access devices showing unavailable

Known Issues

• Managed device monitoring feature (unlocked with Monitoring license) is not working. If required, please contact ZPE support for a hotfix or upgrade to 5.8.5 or later

Nodegrid Version 5.8.2

Release January 18, 2023

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.2.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Improved performance of configuration changes when a large number of Managed Devices is configured.

• Support for 5G cellular module Telit FN990

• Improved API endpoints for USB devices and wireless modem LTE information

Bug Fixes

• Fixed software upgrade on devices with 16GB disk (MSR, HSR, LSR)

• Fixed documentation and setting long timeouts in API endpoint /system/toolkit/files/download

• Fixed cron jobs generating logout events after execution

• Fixed USB Sensor status button when accessed through a cluster

• Fixed DHCP Snooping and Option 82 in NSR Lite

• Fixed ZPE Cloud status bouncing between disconnected and connected

• Fixed power commands for CyberPower PDUs of families ePDU/2 and ATS

• Fixed API endpoint /tracking/hwmonitor/power showing 0 power instead of empty values on some devices that do not support power reading

• Fixed resource leak and smaller API issues on switch endpoints

• Changed interface names of PPPoE connections over backplane to “pppoe.bp” from “pppoe.backplane”, to avoid crossing 15-character interface name limit

• Fixed import/export settings issues on switch ACL

• Fixed issues in “Enable device state detection based in data flow” feature

• Fixed import .ovpn for SSL VPN from Local Computer on MacOS

• Fixed ZPE Cloud Extended Storage application

Nodegrid Version 5.8.1

Release November 30, 2022

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.1.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• N/A

Bug Fixes

• Fixed upgrade failure when /var is full

• Fixed CLI commands resetting Login Page Logo Image

• Fixed password fields import/export on CLI endpoint /settings/802.1x/credentials

• Fixed memory consumption issues on ZPE Cloud agent

• Miscellaneous fixes from v5.8.0 Beta testing

Nodegrid Version 5.8.0-Beta

Release November 17, 2022

Supported Products

Upgrading Instructions

Upgrade methods available from Web Interface and CLI are supported.
This version can be upgraded from previous release v4.2.4 or newer. If necessary, to upgrade from v3.2, v4.0, v4.1 or older v4.2 it will be required to upgrade to v4.2.4 first and then upgrade to v5.8.0.
Downgrade is only allowed to v4.2.4 or newer. UEFI mode and Secure Boot must be disabled prior to downgrading to v5.0 or older.

Software Components Information

New Features and Enhancements

• Major open source packages versions (main ones listed only):

• Expansion of native Ansible integration with Central Management UI and library of samples on github

• FIPS 140-3 mode

• Multi-cluster support

• ElasticSearch + Kibana replaced by OpenSearch + OpenSearch-Dashboards

• Support for sFlow protocol

• New managed device type switch_edgecore, for Edgecore ECS2100-28P switch

• Added script that shows the SFP EEPROM in the NSR-8SFP-EXPN and NSR-16SFP-EXPN

• Upgrades and patches to several open-source packages, fixing non-critical CVEs

Backported features

Development of v5.8.0 introduced features that were back-ported to v5.6.

All features introduced from v5.6.0 to v5.6.8 are available in v5.8.0, including:

• Native integration with OpenWiFi, installed from external package

• Support for DHCP Snooping and DHCP Option 82 in NSR switch ports, with customizable Circuit ID

• New toolkit to generate async keys on TPM, used by ZPE Cloud profiles

• New managed device types openbmc, ups_netagent, and pdu_ice

• Support for new USB-OCP expansion card in NSR, using device type “usb_ocp”

• Support for iDRAC9 latest firmware 6.00.02.00

• Added option to configure a USB port to be mapped to a VM

• When configured, SSH keys are now used when discovering and cloning devices

• Support for system profiles in NSR and NSCP

• Support for enforcing cellular radio connectivity mode (3g, 4g, 5g)

• Support for circular failover and scheduled failback between two SIM cards in the same modem

• Added new Network Settings field to configure local DNS proxy

• Increased IPSec performance with Intel QuickAssist Technology (QAT) in NSR TOP and GSR UPG models

• Added option to enforce source address on TACACS+

• Added option to disable AD referrals for authentication servers

• Support login using RADIUS Realms using the notations username@realm or realm\username by disabling the checkbox at Security / Authentication / Realms

• Support for NFS Server and MACSec via root shell

• Support for Local Administrator CAs at /usr/local/share/ca-certificates. System certificates are now updated during software upgrade, and CAs outside of this directory might get overwritten

• Improved default configuration suppression with export_settings --no-default

• Increased limit of exported/imported settings file from 512 to 1536 MB

• Enhanced diagnostic data to skip large logs when disk is full

• Added API request to delete licenses based on serial number

• UI improvements on Automatic Rollback feature

• Added Wireguard export commands to CLI

• Added “help” and “?” commands to CLI

Breaking Changes

• Cluster nodes running 5.8.0+ will be incompatible with earlier versions

• Removed openvswitch package

• Removed WPA1 support from hotspot connection