[Astlinux-users] AstLinux Pre-Release: astlinux-1.4-5067-7a9a8c

[Lonnie A. <li...@lo...>]

Announcing AstLinux Pre-Release: astlinux-1.4-5067-7a9a8c

Due to many security fixes, Asterisk (pjsip), sRTP replay protection, et al., we plan on releasing AstLinux 1.4.2 sooner than the typical 3-4 month release cycle.

Please test this pre-release, to be followed by a release-candidate and AstLinux 1.4.2 in the next couple weeks.


** IMPORTANT NOTICE

-- The ipsec-tools (racoon) support in AstLinux has been removed. The development of ipsec-tools has been ABANDONED.
	The Network tab -> VPN Type: "IPsec Peers" and "IPsec Mobile" in the web interface has been removed.
	The AstLinux Team suggests using either WireGuard or OpenVPN for your VPN needs, but if IPsec is required for
	compatibility reasons the Network tab -> VPN Type: "IPsec strongSwan" should be able to do what you want,
	albeit in a less than ideal text based configuration.
	More info: https://doc.astlinux-project.org/userdoc:tt_ipsec_vpn_strongswan

** The AstLinux Team is regularly upgrading packages containing security and bug fixes as well as adding new features of our own.

-- Linux Kernel 4.19.177 (version bump), security and bug fixes

-- ipsec-tools (racoon) package has been removed.
	More info: https://doc.astlinux-project.org/userdoc:tt_ipsec_vpn_strongswan

-- OpenSSL, version bump to 1.1.1j, security fixes

-- OpenVPN, version bump to 2.4.10

-- WireGuard VPN, module 1.0.20210219 (version bump), tools 1.0.20210223 (version bump)

-- unbound, version bump to 1.13.1

-- zabbix, version bump to 4.0.29

-- vnStat, new package, version 2.6, interface counter history is saved to /mnt/kd/vnstat/vnstat.db every hour.
	Enabled by default to keep a log of network traffic for external interface(s). No sniffing of traffic is performed.
	New rc.conf variable VNSTAT_ENABLE can be set to "no" to disable.

-- Web Interface, added vnStat tab, available to "admin/staff" users.  Hidden by default in Prefs tab.

-- Asterisk 13.29.2 ('13se' no change)
	Older than latest Asterisk 13.x version but more tested, built --without-pjproject

-- Asterisk 13.38.2 (version bump) and 16.16.1 (version bump)

-- Note: All Asterisk versions now have sRTP replay protection, new rtp.conf config option: srtpreplayprotection=yes
   This new rtp.conf option is enabled by default.
   Buggy SIP user agents may require srtpreplayprotection=no if audio issues occur with sRTP streams.

-- Complete Pre-Release ChangeLog:
https://s3.amazonaws.com/beta.astlinux-project/astlinux-changelog/ChangeLog.txt

The "AstLinux Pre-Release ChangeLog" and "Pre-Release Repository URL" entries can be found under the "Development" tab of the AstLinux Project web site ...

AstLinux Project -> Development
https://www.astlinux-project.org/dev.html


AstLinux Team