Aggregated changelog: 20220310203624

Product	Machine	Version
software-enterprise-uefi-x64	softwarex86-64	5.2.13

OS Buildsystem Tools

EOS-2050 New Feature: Add capability to produce UEFI images for 5.x

Product	Machine	Version
macro-250	nsa3150	5.2.13
macro-250-scb1721	scb1721	5.2.13
macro-500	nsa3150	5.2.13
macro-500-scb1721	scb1721	5.2.13
macro-1000	nsa7120b	5.2.13
macro-2500	nsa7120b	5.2.13
macro-plus-scb1910	scb1910	5.2.13
macro-scb1721	scb1721	5.2.13
macro-x1-nsa3110	nsa3110	5.2.13
macro-x2-nsa3110	nsa3110	5.2.13
mercury-100	nsa1150	5.2.13
mercury-nsa1110	nsa1110	5.2.13
software-enterprise-x64	softwarex86-64	5.2.13
virtual-x64	softwarex86-64	5.2.13

Switchboard API

SB-3378 Bug: User can still use old password after changing it via API changePassword
SB-3410 New Feature: Add new API access.client.getUser
SB-3412 Bug: user_password_first_access_change is always true
SB-3427 Task: Handle quoting for both patched and unpatched versions of App6 on SB5

Switchboard Applications

SB-3337 Bug: SSH guacamole no longer working for endpoints with OpenSSH => 8.2 default configuration
SB-3381 Improvement: Add Portal websocket support
SB-3398 Bug: Wrong %DEVICE_IP% variable resolution when a path is present in Application URL
SB-3418 Bug: App not starting correctly the first time with connect app v6
SB-3435 Bug: Direct access not working correctly for ssh app

Switchboard Connect Web: RDP/VNC/SSH/TELNET

SB-3404 Bug: "The user is already connected" error with Direct Access to an endpoint and page refresh

Switchboard Connection management

SB-3356 Bug: User retrieval must consider special case using @ char in username
SB-3370 Bug: User cannot use direct access if assigned to a gateway without endpoints
SB-3392 Bug: Direct Access: cannot use Windows custom application

Switchboard GUI

SB-3368 Bug: Remove additional unquote from username and password in SB login form

Switchboard Permissions

SB-3390 Bug: auth_cache not properly updated when updating / deleting user groups

Switchboard Settings

SB-3372 Bug: Enabling Portal before setting FQDN locks user out of the GUI

Switchboard User management

SB-3341 Bug: improve Switchboard authentication provider performance listing users

Product	Machine	Version
hotspot-150	scb6901	5.2.13
hotspot-500	nsa1150	5.2.13
hotspot-1500	nsa3150	5.2.13
hotspot-virtual-150	softwarex86-64	5.2.13
hotspot-virtual-500	softwarex86-64	5.2.13
hotspot-virtual-1500	softwarex86-64	5.2.13
macro-250	nsa3150	5.2.13
macro-250-scb1721	scb1721	5.2.13
macro-500	nsa3150	5.2.13
macro-500-scb1721	scb1721	5.2.13
macro-1000	nsa7120b	5.2.13
macro-2500	nsa7120b	5.2.13
macro-plus-scb1910	scb1910	5.2.13
macro-scb1721	scb1721	5.2.13
macro-x1-nsa3110	nsa3110	5.2.13
macro-x2-nsa3110	nsa3110	5.2.13
mercury-50	dna1120	5.2.13
mercury-50-scb1617a	scb1617a	5.2.13
mercury-50-wifi-scb1617a	scb1617a	5.2.13
mercury-100	nsa1150	5.2.13
mercury-fws2365	fws2365	5.2.13
mercury-nsa1110	nsa1110	5.2.13
mini-10	scb6901mmc	5.2.13
mini-10-wifi	scb6901mmc	5.2.13
mini-25	dna120	5.2.13
mini-25-scb6901mmc2	scb6901mmc2	5.2.13
mini-25-wifi	dna120	5.2.13
mini-25-wifi-scb6901mmc2	scb6901mmc2	5.2.13
software-enterprise-10-x64	softwarex86-64	5.2.13
software-enterprise-uefi-x64	softwarex86-64	5.2.13
software-enterprise-x64	softwarex86-64	5.2.13
virtual-10-x64	softwarex86-64	5.2.13
virtual-uefi-x64	softwarex86-64	5.2.13
virtual-x64	softwarex86-64	5.2.13

UTM Antivirus: ClamAV

UTM-2817 Bug: Upgrade ClamAV to 0.103.5 LTS

Product	Machine	Version
4i-edge-112	ifa1610	5.2.13
4i-edge-313	ifa2610	5.2.13
4i-edge-515	ifa3610	5.2.13
hotspot-150	scb6901	5.2.13
hotspot-500	nsa1150	5.2.13
hotspot-1500	nsa3150	5.2.13
hotspot-virtual-150	softwarex86-64	5.2.13
hotspot-virtual-500	softwarex86-64	5.2.13
hotspot-virtual-1500	softwarex86-64	5.2.13
macro-250	nsa3150	5.2.13
macro-250-scb1721	scb1721	5.2.13
macro-500	nsa3150	5.2.13
macro-500-scb1721	scb1721	5.2.13
macro-1000	nsa7120b	5.2.13
macro-2500	nsa7120b	5.2.13
macro-plus-scb1910	scb1910	5.2.13
macro-scb1721	scb1721	5.2.13
macro-x1-nsa3110	nsa3110	5.2.13
macro-x2-nsa3110	nsa3110	5.2.13
mercury-50	dna1120	5.2.13
mercury-50-scb1617a	scb1617a	5.2.13
mercury-50-wifi-scb1617a	scb1617a	5.2.13
mercury-100	nsa1150	5.2.13
mercury-fws2365	fws2365	5.2.13
mercury-nsa1110	nsa1110	5.2.13
mini-10	scb6901mmc	5.2.13
mini-10-wifi	scb6901mmc	5.2.13
mini-25	dna120	5.2.13
mini-25-scb6901mmc2	scb6901mmc2	5.2.13
mini-25-wifi	dna120	5.2.13
mini-25-wifi-scb6901mmc2	scb6901mmc2	5.2.13
software-enterprise-10-x64	softwarex86-64	5.2.13
software-enterprise-uefi-x64	softwarex86-64	5.2.13
software-enterprise-x64	softwarex86-64	5.2.13
virtual-10-x64	softwarex86-64	5.2.13
virtual-uefi-x64	softwarex86-64	5.2.13
virtual-x64	softwarex86-64	5.2.13

Core Base system

CORE-4688 Bug: python-certifi should read system CA bundle
CORE-4694 Bug: toscawidgets calls a useless time consuming logging function

Core EMI

CORE-4685 Bug: emi performs a lock on each call to load_users when checking access permissions
CORE-4702 Improvement: emi thread dies without informations

Core Firewall

CORE-4578 Bug: setpolicyrouting will not mark a connection with destination route via uplink
CORE-4700 Improvement: vpnfwdst chain is populated also if not used

Hotspot Login portal

HOTSPOT-942 Bug: Renewal of the hotspot.endian.com certificate

OS Yocto

EOS-2167 Improvement: Fix warning on polkit recipe

Security Base System

SEC-97 Bug: CVE-2021-4034 pkexec: local privilege escalation

Switchboard Database

SB-3339 Bug: Improve queries related to User or Gateway editing

Switchboard Device management

SB-3421 Bug: Virtual IP collision for new endpoints

UTM Certificate Management

UTM-2804 Task: updates ca-certificates package to 20211016

UTM VPN: OpenVPN

UTM-2535 Task: Implement explicit-exit-notify
UTM-2812 Bug: Duplicated ip rule on VPN client reconnection
UTM-2822 Bug: Potential deadlock on VPN disconnect