This documentation applies only Turris OS 3.x that is no longer present in newly sold routers.
The new documentation is located at https://docs.turris.cz/.
Turris OS 3.x changelog
On this page you can find release notes for recent Turris OS releases. If there are any known bugs connected to specific releases, then they're listed here with a workaround. You can also find long-term issues on a separate page called Erratum. We publish posts about all releases to our Forum, where you can also describe any bugs that you find.
3.11.23
Was released on 9th February 2021.
Changelog
sudo: security update (Baron Samedit) - CVE-2021-3156
dnsmasq: security update (DNSpooq)
ffmpeg, curl, uci: security update
youtube-dl, msmtp, netdata, tar, foris: update
3.11.22
Was released on 26th January 2021.
Changelog
base-files: do not require explicit enabling of nf_conntrack_helper
updater-ng, knot-resolver, unbound: update
foris: XSS bug fix - CVE-2021-3346
3.11.21
Was released on 16th November 2020.
Changelog
kernel: security update (Sad
DNS; CVE-2020-25705)
3.11.20
Was released on 11th November 2020.
Changelog
openssl, gnutls, opkg, samba4: security updates
knot-resolver, knot, netmetr, unbound: update
nf-nathelper-extra: removed from userlist (CVE-2020-28041)
3.11.19.1
Was released on 7th Semptember 2020.
Changelog
3.11.19
Was released on 31st August 2020.
Changelog
notification: check if country is set for stable working Wi-Fi
curl, mbedtls: security updates
unbound, mdadm, youtube-dl, smartmontools, msmtp, haveged: update
obfsproxy, obfs4proxy, yara: removed not-available packages
knot-resolver: DNSSEC key is read-only
3.11.18
Was released on 23rd July 2020.
Changelog
3.11.17
Was released on 4th June 2020.
Changelog
git, samba4, krb5, unbound, knot-resolver, bind: security update
updater-ng, nextcloud, btrfs-progs, resolver-conf: update
python3-msgpack, atlas-sw-probe, sentinel-dynfw-client: update
3.11.16
Was released on 8th April 2020.
Changelog
tor, subversion: security update
msmtp, curl, atlas-sw-probe, reptyr, btrfs-progs, nextcloud, youtube-dl, netdata, netmetr: update
3.11.15
Was released on 12th March 2020.
Changelog
suricata, ppp: security update
nextcloud, turris-firewall-rules, unbound, lighttpd: update
3.11.14
Was released on 5th February 2020.
Changelog
3.11.13
Was released on 16th January 2020.
Changelog
openssl, ffmpeg, unbound: security update
kernel, resolver-conf, knot-resolver, nextcloud: update
3.11.12
Was released on 20th December 2019.
Changelog
3.11.11
Was released on 18th December 2019.
Changelog
3.11.10
Was released on 4th December 2019.
Changelog
3.11.9
Was released on 20th November 2019.
Changelog
tcpdump, sudo, uci, libarchive: security update
knot-resolver, wireguard, kernel, youtube-dl, turris-maintain, knot: update
foris-controller-openvpn-module: fix server ip address autodetection
ripe-atlas-probe, atlas-sw-probe: new packages
3.11.8
Was released on 14th October 2019.
Changelog
foris, youtube-dl, wireguard, nextcloud, kernel: update
bird, python[3]-urllib3, netdata, ustream-ssl: update
openssl, unbound: security update
3.11.7
Was released on 16th September 2019.
Changelog
unbound, haveged, youtube-dl, wireguard, nextcloud, kernel: update
bind, lighttpd: security update
ucollect: CA certificate update
3.11.6
Was released on 13th August 2019.
Changelog
iptables: security update (CVE-2019-11360)
knot-resolver, netdata, youtube-dl, foris, sentinel-certgen, wireguard, python3-idna, kernel: update
resolver-conf: add secondary IP for
DNS server (IPv4 and IPv6)
turris-netboot: minor fixes and add parameter force
dev-detect: introduce a new lightweight version than pakon-dev-detect (opt-in)
3.11.5
Was released on 19th June 2019.
Changelog
bind, libxslt, libpng, dovecot, gnutls, wget, samba4, tiff, suricata: security updates
schnapps, netdata, youtube-dl, libhtp, foris, syslog-ng, nextcloud, resolver-conf: update
python-certifi, python-urllib3, python3-pyroute2: new packages
kernel: update (CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)
support for our new ODVR servers with
DNS over TLS
3.11.4
Was released on 17th April 2019.
Changelog
mosquitto, libatsha204, libssh2, dovecot: security updates
unbound, netdata, nextcloud, youtube-dl, ca-certificates, czmq: update
python3-certifi, python3-urllib3: new packages
pakon: minor fixes
kernel: update
3.11.3
Was released on 26th March 2019.
Changelog
Foris: unification of themes across all Turris products
foris-controller-openvpn-module: compression logic updates
turris-netboot: initial support for booting Turris MOX over network
openssh, keepalived, tar, dovecot, curl, prosody, openssh, openssl, bind, tor: security updates
tvheadend, youtube-dl, wireguard, syslog-ng, unbound, netdata and various minor packages: update
lua-cqueues: add a new package
kernel: update
logread: fix
foris-pakon: fix for Safari
3.11.2
Was released on 15th January 2019.
Changelog
knot-resolver: update improving behaviour without IPv6
mac80211: update to the latest version from LEDE 17.01
pakon: fix sorting and other small issues
foris: internal bus replaced by mosquito, if you are using mosquito, make sure it is still active
uboot-mkimage and dtc: new packages
kernel, samba, wget and various minor packages: update
3.11.1
Was released on 19th December 2018.
Changelog
netdata: update for Omnia
subversion, unbound, git, ath10k-ct, miniupnpd, mwan3: updates
samba4, bzip2, openssl, tiff, apache, sqlite3: security updates
pakon: further improvements of archivation
majordomo: removed from the list of applications on updater page, still available for manual installation
mdadm, webapps, nextcloud: minor fixes
tvheadend: fix first time setup
3.11
Was released on 10th December 2018.
Changelog
foris: migration to python3
foris: wizard replaced by guide
foris: small cleanups and rearranging
sentinel: first parts of new data collection engine
samba4: experimental support
better integration of third party web applications
various package updates (for example Knot Resolver, Nextcloud 14, tor, netdata, yara, vim, minidlna, mbedtls, wireguard, and so on)
3.10.8
Was released on 15th October 2018.
Changelog
kernel, nextcloud, btrfs-progs, php: update
kernel: drop blkio LED trigger as it was causing some issues from time to time
pakon: more robust database maintanance
3.10.7
Was released on 26th September 2018.
Changelog
kernel, ath10k-firmware: update
ath10k-ct: fix missing symbols
lighttpd: fix manually edited configuration file
3.10.6
Was released on 20th September 2018.
Changelog
kernel, tiff: security update
openssh, nextcloud, lighttpd, libpcap, openssl, ath10k-ct, minidlna, wireguard: updates
pakon: more robust recovery from broken database
storage: fix support for partitionless drives
procd: minor compatibility fixes
lxc: more prominent warning about container usage“
3.10.5
Was released on 22nd August 2018.
Changelog
kernel, odhcpv6, twisted, openssh: update
ca-certificates: package for ca bundle
unbound: enable TCP fast open
haas-proxy: more robust CPU usage limits
odhcpv6: disable unicast support (caused problems in some networks), can be enabled in /etc/config/network
3.10.4
Was released on 16th August 2018.
Changelog
kernel: update to version 4.4.147; fixes TCP vulnerability CVE-2018-5390
owfs: update to the version 3.2p2 (also upstreamed to OpenWRT)
ustream-ssl: update to the version from 24/05/2018
pakon: fix notify for new devices detection
suricata-pakon: default mode for suricata is now IDS
haas-proxy: updated to the version 1.9.0 (logging with timestamps and added more modes for logs)
knot-resolver: security fix, update to the version 2.4.1
dump1090: builds for Turris 1.x, too.
nextcloud: update to the version 13.0.5
nginx: update to version 1.15.1
transmission: update to the version 2.94; allow to define custom webui
luci-app-transmission: allow to define custom webui
3.10.3
Was released on 27th June 2018.
Changelog
nextcloud: update
pakon, storage: minor fixes
kernel, unbound: update and minor fixes
3.10.2
Was released on 18th June 2018.
Changelog
haas: fix firewall integration
ucollect: more robust start
updater: fix collisions when updating from old versions
dvbsky: fix driver compilation
nut: fix update
kernel, nextcloud: update
3.10.1
Was released on 7th June 2018.
Changelog
Foris support for 6in4 and 6to4
Foris and OpenVPN server: users can choose the protocol TCP/UDP
Foris and OpenVPN server: fix for generating CA
Foris - Wizard: fix for 7th step
Foris - Pakon: fix compatibility for Safari and
IE browsers
Netmetr synchronization code
kernel: update and added driver for UAS and the driver is also added to the NAS list
3.10
Was released on 10th May 2018.
Changelog
Foris: possibility to change time settings outside of the wizard
Foris: fix noncrypto random csrf (thanks to Stephen Röttger)
Foris - plugin: Storage plugin, which will move IO-intensive data to an external drive
Foris - plugin: Server Side backups
Pakon: Foris user interface and better results filtering
Updates to various upstream packages
Updater: dropped obsolete updater.sh and friends, use ‘’pkgupdate’’ instead
Excessive writing to the internal flash disk (eMMC) wear it out and this can result in irreparable damage to your device, which doesn't have to be covered by warranty.
3.9.6
Was released on 6th March 2018.
Changelog
haas: update and fix logging and firewall
irssi, rsync, dovecot, squid, mxml, libvorbis, libtasn1, unzip, php: security updates
xfsprogs: add xfs_admin tool
luci-lxc: fix container creation
kernel: update, modules for dvb-mn88473 and dvb-usb-cxusb added
dnsmasq: fix sequential ip assignment
suricata: fix workaround for some IPv6 issues
3.9.5
Was released on 6th February 2018.
Changelog
HaaS: fix session pairing, disabled logging by default
Foris: updated description for Access tokens
updater: fix dependencies
suricata: workaround for some IPv6 issues
Known issues
Suricata and IPv6 issues
LAN doesn't get router advertisement of IPv6
Workaround: Will be present in new version of Turris
OS, right now you can edit file
/etc/init.d/suricata and change line
from
echo "-I suricata -p icmp -j RETURN" >> $IP6TABLES_RULES #workaround: ignore ICMPv6
to
echo "-I suricata -p icmpv6 -j RETURN" >> $IP6TABLES_RULES #workaround: ignore ICMPv6
3.9.4
Was released on 30th January 2018.
Changelog
haas: update to the latest version
haas: more robust registration
kernel: update to the latest version, Sierra Wireless EM7565 drivers
nextcloud: update to the latest version
poco, mariadb, curl, unbound, bind: security updates
Foris: fixed
DNS tab for Turris 1.x routers
lighttpd-https-cert: Added warning to file /etc/lighttpd/conf.d/ssl-enable.conf that you shouldn't modify it
Known issues
HaaS
3.9.3
Was released on 22nd January 2018.
Changelog
3.9.2
Was released on 16th January 2018.
Changelog
musl & busybox: use stronger password hash by default
kernel: update to the latest version
netmetr: fix configuration reset
updater: various small fixes
openssl, libtiff, socat, rsync, coreutils, php, irssi: security updates
tvheadend: update to the latest version
knot-resolver & unbound: fixes in local domains
suricata: fix startup issue on some routers, performance tweaks
3.9.1
Was released 21st December 2017.
We bring LXC image Debian Jessie back and updated Ubuntu image.
Changelog
coreutils: update to the latest version
uci: less sync calls - faster commits
hostapd: updated patches from LEDE
kernel: update to the latest version, fix LXC error
pakon: more robust installation
updater: more robust updates and fixes to local repos handling
knot-resolver: update to the latest version
foris: updated translations and more diagnostics
haas-proxy: more robust firewall integration
Known issues
Netmetr
Updater