User Tools

Site Tools

This documentation is no longer maintained by the Turris team (although it can be used by the community to share content). The current official documentation is at docs.turris.cz.

This documentation applies only Turris OS 3.x that is no longer present in newly sold routers. The new documentation is located at https://docs.turris.cz/.

Turris OS 3.x changelog

On this page you can find release notes for recent Turris OS releases. If there are any known bugs connected to specific releases, then they're listed here with a workaround. You can also find long-term issues on a separate page called Erratum. We publish posts about all releases to our Forum, where you can also describe any bugs that you find.

3.11.23

Was released on 9th February 2021.

Changelog

  • sudo: security update (Baron Samedit) - CVE-2021-3156
  • dnsmasq: security update (DNSpooq)
  • ffmpeg, curl, uci: security update
  • youtube-dl, msmtp, netdata, tar, foris: update

3.11.22

Was released on 26th January 2021.

Changelog

  • base-files: do not require explicit enabling of nf_conntrack_helper
  • updater-ng, knot-resolver, unbound: update
  • foris: XSS bug fix - CVE-2021-3346

3.11.21

Was released on 16th November 2020.

Changelog

  • kernel: security update (Sad DNS; CVE-2020-25705)

3.11.20

Was released on 11th November 2020.

Changelog

  • openssl, gnutls, opkg, samba4: security updates
  • knot-resolver, knot, netmetr, unbound: update
  • nf-nathelper-extra: removed from userlist (CVE-2020-28041)

3.11.19.1

Was released on 7th Semptember 2020.

Changelog

  • mbedtls: security update

3.11.19

Was released on 31st August 2020.

Changelog

  • notification: check if country is set for stable working Wi-Fi
  • curl, mbedtls: security updates
  • unbound, mdadm, youtube-dl, smartmontools, msmtp, haveged: update
  • obfsproxy, obfs4proxy, yara: removed not-available packages
  • knot-resolver: DNSSEC key is read-only

3.11.18

Was released on 23rd July 2020.

Changelog

  • gnutls: security update
  • foris, foris-openvpn-plugin, knot-resolver: update
  • 3xmigrate: new userlist

3.11.17

Was released on 4th June 2020.

Changelog

  • git, samba4, krb5, unbound, knot-resolver, bind: security update
  • updater-ng, nextcloud, btrfs-progs, resolver-conf: update
  • python3-msgpack, atlas-sw-probe, sentinel-dynfw-client: update

3.11.16

Was released on 8th April 2020.

Changelog

  • tor, subversion: security update
  • msmtp, curl, atlas-sw-probe, reptyr, btrfs-progs, nextcloud, youtube-dl, netdata, netmetr: update

3.11.15

Was released on 12th March 2020.

Changelog

  • suricata, ppp: security update
  • nextcloud, turris-firewall-rules, unbound, lighttpd: update

3.11.14

Was released on 5th February 2020.

Changelog

  • opkg: security update
  • wireguard, youtube-dl: update

3.11.13

Was released on 16th January 2020.

Changelog

  • openssl, ffmpeg, unbound: security update
  • kernel, resolver-conf, knot-resolver, nextcloud: update

3.11.12

Was released on 20th December 2019.

Changelog

  • git: security update

3.11.11

Was released on 18th December 2019.

Changelog

  • Merry Christmas!

Introduced package: christmas

  • knot-resolver: security update

3.11.10

Was released on 4th December 2019.

Changelog

  • php7: security update
  • kernel, unbound, python3-uci: update

3.11.9

Was released on 20th November 2019.

Changelog

  • tcpdump, sudo, uci, libarchive: security update
  • knot-resolver, wireguard, kernel, youtube-dl, turris-maintain, knot: update
  • foris-controller-openvpn-module: fix server ip address autodetection
  • ripe-atlas-probe, atlas-sw-probe: new packages

3.11.8

Was released on 14th October 2019.

Changelog

  • foris, youtube-dl, wireguard, nextcloud, kernel: update
  • bird, python[3]-urllib3, netdata, ustream-ssl: update
  • openssl, unbound: security update

3.11.7

Was released on 16th September 2019.

Changelog

  • unbound, haveged, youtube-dl, wireguard, nextcloud, kernel: update
  • bind, lighttpd: security update
  • ucollect: CA certificate update

3.11.6

Was released on 13th August 2019.

Changelog

  • iptables: security update (CVE-2019-11360)
  • knot-resolver, netdata, youtube-dl, foris, sentinel-certgen, wireguard, python3-idna, kernel: update
  • resolver-conf: add secondary IP for DNS server (IPv4 and IPv6)
  • turris-netboot: minor fixes and add parameter force
  • dev-detect: introduce a new lightweight version than pakon-dev-detect (opt-in)

3.11.5

Was released on 19th June 2019.

Changelog

  • bind, libxslt, libpng, dovecot, gnutls, wget, samba4, tiff, suricata: security updates
  • schnapps, netdata, youtube-dl, libhtp, foris, syslog-ng, nextcloud, resolver-conf: update
  • python-certifi, python-urllib3, python3-pyroute2: new packages
  • kernel: update (CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)
  • support for our new ODVR servers with DNS over TLS

3.11.4

Was released on 17th April 2019.

Changelog

  • mosquitto, libatsha204, libssh2, dovecot: security updates
  • unbound, netdata, nextcloud, youtube-dl, ca-certificates, czmq: update
  • python3-certifi, python3-urllib3: new packages
  • pakon: minor fixes
  • kernel: update

3.11.3

Was released on 26th March 2019.

Changelog

  • Foris: unification of themes across all Turris products
  • foris-controller-openvpn-module: compression logic updates
  • turris-netboot: initial support for booting Turris MOX over network
  • openssh, keepalived, tar, dovecot, curl, prosody, openssh, openssl, bind, tor: security updates
  • tvheadend, youtube-dl, wireguard, syslog-ng, unbound, netdata and various minor packages: update
  • lua-cqueues: add a new package
  • kernel: update
  • logread: fix
  • foris-pakon: fix for Safari

3.11.2

Was released on 15th January 2019.

Changelog

  • knot-resolver: update improving behaviour without IPv6
  • mac80211: update to the latest version from LEDE 17.01
  • pakon: fix sorting and other small issues
  • foris: internal bus replaced by mosquito, if you are using mosquito, make sure it is still active
  • uboot-mkimage and dtc: new packages
  • kernel, samba, wget and various minor packages: update

3.11.1

Was released on 19th December 2018.

Changelog

  • netdata: update for Omnia
  • subversion, unbound, git, ath10k-ct, miniupnpd, mwan3: updates
  • samba4, bzip2, openssl, tiff, apache, sqlite3: security updates
  • pakon: further improvements of archivation
  • majordomo: removed from the list of applications on updater page, still available for manual installation
  • mdadm, webapps, nextcloud: minor fixes
  • tvheadend: fix first time setup

3.11

Was released on 10th December 2018.

Changelog

  • foris: migration to python3
  • foris: wizard replaced by guide
  • foris: small cleanups and rearranging
  • sentinel: first parts of new data collection engine
  • samba4: experimental support
  • better integration of third party web applications
  • various package updates (for example Knot Resolver, Nextcloud 14, tor, netdata, yara, vim, minidlna, mbedtls, wireguard, and so on)

3.10.8

Was released on 15th October 2018.

Changelog

  • kernel, nextcloud, btrfs-progs, php: update
  • kernel: drop blkio LED trigger as it was causing some issues from time to time
  • pakon: more robust database maintanance

3.10.7

Was released on 26th September 2018.

Changelog

  • kernel, ath10k-firmware: update
  • ath10k-ct: fix missing symbols
  • lighttpd: fix manually edited configuration file

3.10.6

Was released on 20th September 2018.

Changelog

  • kernel, tiff: security update
  • openssh, nextcloud, lighttpd, libpcap, openssl, ath10k-ct, minidlna, wireguard: updates
  • pakon: more robust recovery from broken database
  • storage: fix support for partitionless drives
  • procd: minor compatibility fixes
  • lxc: more prominent warning about container usage“

3.10.5

Was released on 22nd August 2018.

Changelog

  • kernel, odhcpv6, twisted, openssh: update
  • ca-certificates: package for ca bundle
  • unbound: enable TCP fast open
  • haas-proxy: more robust CPU usage limits
  • odhcpv6: disable unicast support (caused problems in some networks), can be enabled in /etc/config/network

3.10.4

Was released on 16th August 2018.

Changelog

  • kernel: update to version 4.4.147; fixes TCP vulnerability CVE-2018-5390
  • owfs: update to the version 3.2p2 (also upstreamed to OpenWRT)
  • ustream-ssl: update to the version from 24/05/2018
  • pakon: fix notify for new devices detection
  • suricata-pakon: default mode for suricata is now IDS
  • haas-proxy: updated to the version 1.9.0 (logging with timestamps and added more modes for logs)
  • knot-resolver: security fix, update to the version 2.4.1
  • dump1090: builds for Turris 1.x, too.
  • nextcloud: update to the version 13.0.5
  • nginx: update to version 1.15.1
  • transmission: update to the version 2.94; allow to define custom webui
  • luci-app-transmission: allow to define custom webui

3.10.3

Was released on 27th June 2018.

Changelog

  • nextcloud: update
  • pakon, storage: minor fixes
  • kernel, unbound: update and minor fixes

3.10.2

Was released on 18th June 2018.

Changelog

  • haas: fix firewall integration
  • ucollect: more robust start
  • updater: fix collisions when updating from old versions
  • dvbsky: fix driver compilation
  • nut: fix update
  • kernel, nextcloud: update

3.10.1

Was released on 7th June 2018.

Changelog

  • Foris support for 6in4 and 6to4
  • Foris and OpenVPN server: users can choose the protocol TCP/UDP
  • Foris and OpenVPN server: fix for generating CA
  • Foris - Wizard: fix for 7th step
  • Foris - Pakon: fix compatibility for Safari and IE browsers
  • Netmetr synchronization code
  • kernel: update and added driver for UAS and the driver is also added to the NAS list

3.10

Was released on 10th May 2018.

Changelog

  • Foris: possibility to change time settings outside of the wizard
  • Foris: fix noncrypto random csrf (thanks to Stephen Röttger)
  • Foris - plugin: Storage plugin, which will move IO-intensive data to an external drive
  • Foris - plugin: Server Side backups
  • Pakon: Foris user interface and better results filtering
  • Updates to various upstream packages
  • Updater: dropped obsolete updater.sh and friends, use ‘’pkgupdate’’ instead

Excessive writing to the internal flash disk (eMMC) wear it out and this can result in irreparable damage to your device, which doesn't have to be covered by warranty.

3.9.6

Was released on 6th March 2018.

Changelog

  • haas: update and fix logging and firewall
  • irssi, rsync, dovecot, squid, mxml, libvorbis, libtasn1, unzip, php: security updates
  • xfsprogs: add xfs_admin tool
  • luci-lxc: fix container creation
  • kernel: update, modules for dvb-mn88473 and dvb-usb-cxusb added
  • dnsmasq: fix sequential ip assignment
  • suricata: fix workaround for some IPv6 issues

3.9.5

Was released on 6th February 2018.

Changelog

  • HaaS: fix session pairing, disabled logging by default
  • Foris: updated description for Access tokens
  • updater: fix dependencies
  • suricata: workaround for some IPv6 issues

Known issues

Suricata and IPv6 issues

  • LAN doesn't get router advertisement of IPv6
    • Workaround: Will be present in new version of Turris OS, right now you can edit file /etc/init.d/suricata and change line

from

echo "-I suricata -p icmp -j RETURN" >> $IP6TABLES_RULES #workaround: ignore ICMPv6

to

echo "-I suricata -p icmpv6 -j RETURN" >> $IP6TABLES_RULES #workaround: ignore ICMPv6

3.9.4

Was released on 30th January 2018.

Changelog

  • haas: update to the latest version
  • haas: more robust registration
  • kernel: update to the latest version, Sierra Wireless EM7565 drivers
  • nextcloud: update to the latest version
  • poco, mariadb, curl, unbound, bind: security updates
  • Foris: fixed DNS tab for Turris 1.x routers
  • lighttpd-https-cert: Added warning to file /etc/lighttpd/conf.d/ssl-enable.conf that you shouldn't modify it

Known issues

HaaS

  • HaaS doesn't show records on the website
    • Gitlab commit
    • Workaround: remove line 29 procd_set_param user nobody in file /etc/init.d/haas-proxy

3.9.3

Was released on 22nd January 2018.

Changelog

  • knot-resolver: fixes security issue CVE-2018-1000002

3.9.2

Was released on 16th January 2018.

Changelog

  • musl & busybox: use stronger password hash by default
  • kernel: update to the latest version
  • netmetr: fix configuration reset
  • updater: various small fixes
  • openssl, libtiff, socat, rsync, coreutils, php, irssi: security updates
  • tvheadend: update to the latest version
  • knot-resolver & unbound: fixes in local domains
  • suricata: fix startup issue on some routers, performance tweaks

3.9.1

Was released 21st December 2017.
We bring LXC image Debian Jessie back and updated Ubuntu image.

Changelog

  • coreutils: update to the latest version
  • uci: less sync calls - faster commits
  • hostapd: updated patches from LEDE
  • kernel: update to the latest version, fix LXC error
  • pakon: more robust installation
  • updater: more robust updates and fixes to local repos handling
  • knot-resolver: update to the latest version
  • foris: updated translations and more diagnostics
  • haas-proxy: more robust firewall integration

Known issues

Netmetr

  • Update of package netmetr resets its configuration

Updater

  • updater.sh executed from terminal hangs when approvals are enabled
    • Gitlab issue turris/updater#241
    • Solution: Approve updates from Foris or remove package coreutils-timeout