Line 7: |
Line 7: |
| ==Changelog== | | ==Changelog== |
| <!--NEW_FW--> | | <!--NEW_FW--> |
| + | ===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.8/RUT9M/RUT9M_R_00.07.08_WEBUI.bin RUT9M_R_00.07.08]</span></b> | 2024.07.18=== |
| + | * <b>New</b> |
| + | ** <b>Network</b> |
| + | *** DNS: added inherited server status to configuration page |
| + | *** HTTPS DNS Proxy: added new HTTPS DNS Proxy package to package manager |
| + | *** Mobile: added SIM card lock/unlock functionality in Mobile->Utilities page |
| + | *** Mobile: added SIM card PIN change functionality in Mobile->Utilities page |
| + | *** Mobile: added new Mobile->Limits page which shows information and allows to configure Data and SMS limits |
| + | *** Mobile: added DFOTA support for RG520N modems |
| + | *** Mobile: added nr-arfcn display to mobile status page |
| + | *** Mobile: added dfota support for devices with RG520N-EB modem |
| + | ** <b>Services</b> |
| + | *** Data to Server: added 'Lua script' data input |
| + | *** Hotspot: added Single Sign-on (OIDC) authentication mode |
| + | *** Hotspot: added Walled Garden blocklist functionality |
| + | *** Input/Output: added ability to configure gpio debounce timer and changed default gpio debounce timer value from 200 ms to 10 ms |
| + | *** IPsec: added initial XFRM support |
| + | *** MQTT Modbus Gateway: added JSON message type format |
| + | *** OpenVPN: added DCO support |
| + | ** <b>System</b> |
| + | *** API Core: added option to configure api session timeout |
| + | *** Certificates: added "Let's encrypt" certificate generation |
| + | *** PAM: added RADIUS external user support |
| + | *** UI Core: added data analytics support |
| + | *** Update Firmware: added warning message about device being temporarily unreachable on firmware update |
| + | * <b>Improvements</b> |
| + | ** <b>Network</b> |
| + | *** DNS: separated field "DNS forwardings" into two: one for simple server forwarding other for domain-specific |
| + | *** DNS: moved "DNS Forwardings", "Listen interfaces", "Exclude interfaces", "Local service only", options to advanced tab |
| + | *** Firewall: improved protocol field in all firewall pages by making that "All" value would be mutually exclusive with any other value |
| + | *** Mobile: improved IMS context initialization |
| + | *** Mobile: updated SMS memory management for multipart SMS |
| + | *** Mobile: added error message when attempting to enable the SIM switch without any criteria set |
| + | *** Mobile: added informative message in SIM switch page when Data/SMS limit criteria are enabled but the limits themselves are not set up |
| + | *** Mobile: moved operator list allowlist/blocklist selection to Network selection page |
| + | *** Mobile: refactored Scanned operators modal, added repeat scan button |
| + | *** Mobile: added ability to view previously scanned operators in Network selection and Operator lists pages |
| + | *** Mobile: added ability to edit operator list name and initiate scans for operators in Operator lists page |
| + | *** Mobile: updated operator code field list to include APNs from the APN database in Operator lists page |
| + | *** Mobile: split Mobile->General page into three pages: General, Connection and Utilities pages |
| + | *** Mobile: added mobile interface with highest priority APN configuration in Mobile->General page |
| + | *** Mobile: added icons with hints which show SIM card, operator, data connection statuses in Mobile->General page |
| + | *** Mobile: moved Mobile data limit section to a tab in WAN page |
| + | *** Mobile: added informative message in WAN page to indicate whether the connection will be made using APN from APN database, empty or custom APN |
| + | *** Mobile: improved logging of ping error messages |
| + | *** Mobile: added 5G SA/NSA mode selection |
| + | *** Mobile: improved modem updater to stop ping reboot service while update is in progress |
| + | *** Mobile: improved the handling of denied messages upon SIM switch |
| + | *** Mobile: added notification when a multi-IMSI SIM card is using Auto APN |
| + | *** Mobile: added validation to not allow passthrough and bridge mode when one already exists |
| + | *** Mobile: improved safeguards for modem services startup |
| + | *** Mobile: improved modem update status display |
| + | *** Mobile: added corrupted mobile statistics database restoration functionallity |
| + | *** Mobile: improved setting of IPv4 and IPv6 types inside the modules |
| + | *** Mobile: improved provider name parsing for SLM750 modem |
| + | *** Multi WAN: improved interface status representation when using load balancing |
| + | *** Network: added more options for "IPv6 assignment length" field |
| + | *** VLAN: added ability to configure VLAN 0 |
| + | *** Wireless: added warning when user configures mesh on radio with automatic frequency channel |
| + | *** Wireless: added support for wireless MAC-filter MAC ranges |
| + | *** Wireless: changed Radius Accounting port is not required when configuring access point with enterprise encryption |
| + | *** Wireless: refactored radio configuration page layout |
| + | *** Wireless: refactored assignment of wireless interfaces MAC addresses, STA interface will always use fixed address |
| + | ** <b>Services</b> |
| + | *** Azure IoT Hub: added DPS symmetric key attestation support |
| + | *** Azure IoT Hub: added Direct Method support |
| + | *** Azure IoT Hub: added Plug and Play integration |
| + | *** Azure IoT Hub: added link to "Data to Server" page |
| + | *** Data to Server: added support for multiple filters |
| + | *** Data to Server: improved HTTP output hostname definition with automatic protocol specification in URL |
| + | *** Data to Server: improved MQTT input connection handling |
| + | *** DNP3 Client: added option to enable/disable service |
| + | *** Dynamic DNS: added Lookup hostnames support |
| + | *** GRE: increased Inbound and Outbound key limit to 4294967295 |
| + | *** Hotspot: adjusted hotspot user manager page to display active and inactive user sessions |
| + | *** Hotspot: changed local users to be stored with other types of users |
| + | *** Hotspot: added 'noc2c' option for enabling client isolation, option is enabled by default |
| + | *** Input/Output: added custom name support in I/O status page |
| + | *** IPsec: added certificate warning message |
| + | *** Mobile Utilities: added interface option to sms_utils cellular command |
| + | *** Mobile Utilities: improved error log message |
| + | *** Mobile Utilities: improved naming of I/O pins in initial I/O status rule |
| + | *** Mobile Utilities: sms utilities authentication brute force prevention |
| + | *** Modbus Server: added mobile last month and last week usage registers |
| + | *** Mosquitto: added large package size check for MQTT clients |
| + | *** MQTT Modbus Gateway: improved mosquitto reconnect time and service will try to recover few times before exiting |
| + | *** MQTT Publisher: improved MQTT connection handling |
| + | *** OPC UA Client: added security modes |
| + | *** OPC UA Server: added security modes |
| + | *** OPC UA Server: added service status display |
| + | *** OpenVPN: added support for decrypting private key when uploading a configuration file |
| + | *** OpenVPN: improved instance status state |
| + | *** OpenVPN: added options to specify an IP address pool for dynamic assignment to clients |
| + | *** SMPP: added brute-force prevention |
| + | *** SMPP: added TLS/SSL support |
| + | *** SMS Utilities: added security warning in "Authorization method" configuration |
| + | *** SNMP: changed interface module OID structure |
| + | *** SNMP: improved User-based Security Model (USM) brute force attack prevention measures |
| + | *** Stunnel: improved global instance settings dependencies |
| + | *** emailrelay: updated version to 2.4.1 |
| + | *** OpenVPN: updated version to 2.6.9 |
| + | *** stunnel: updated version to 5.72 |
| + | ** <b>System</b> |
| + | *** Access Control: added certificate key length warnings |
| + | *** Access Control: adjusted access control when all pages are blocked |
| + | *** Access Control: added certificate file download for CLI to work on all browsers |
| + | *** API Core: implemented functionality to include warning messages for vulnerable certificates |
| + | *** Boot: improved modem startup reliability |
| + | *** Package Manager: added multi package actions |
| + | *** Package Manager: added status filter |
| + | *** Package Manager: moved package upload action to main page |
| + | *** Package Manager: added links to installed packages pages |
| + | *** Package Manager: refactored "Packages" page |
| + | *** Package Manager: updated opkg repository link to use https |
| + | *** RutOS: improved GPL example page to align with new software architecture |
| + | *** Troubleshoot: refactored Modem debug section to display responses in single field, added clear button to remove received responses |
| + | *** Troubleshoot: added support for multiple syslog servers |
| + | *** UI Core: added additional message with IP address to loading screen for scenarios when redirect to different IP address happens |
| + | *** UI Core: added toast message hiding when text is too long |
| + | *** Update Firmware: added 'Firmware version' data in screen after firmware upload |
| + | *** WebUI: added functionality to cancel loading screen if it takes 30 or more seconds |
| + | *** WebUI: removed all ubus method calls from webui |
| + | *** WebUI: improved language caching |
| + | *** WebUI: added password generator for first login modal |
| + | *** WebUI: added sticky position to side menu |
| + | *** WebUI: added default password hint to login error message |
| + | *** WebUI: added warning messages for low-security certificates |
| + | *** Kernel: updated version to 5.15.159 |
| + | *** libexpat: updated version to 2.6.2 |
| + | *** SSL/TLS: updated version to 3.0.14 |
| + | *** vue: updated version to 3.4 |
| + | * <b>Fix</b> |
| + | ** <b>Network</b> |
| + | *** Channel Analysis: fixed network list not being updated if a single scan fails |
| + | *** Devices: fixed missing API devices status endpoint permission |
| + | *** DHCP: fixed "DHCP option" allow empty input value |
| + | *** DHCP: fixed IPv4 leases being not correctly shown when NTP synchronizes time |
| + | *** DHCP: fixed DHCP error that occurred after changing the subnet of the LAN IP address in the setup wizard |
| + | *** Dynamic routes: fixed duplicated external routes cards |
| + | *** Firewall: fixed firewall zone validation when adding interfaces |
| + | *** Mobile: fixed low signal reconnect being available on modems where it is not supported |
| + | *** Mobile: fixed gsmctl -E output to return only json values |
| + | *** Mobile: fixed Carrier Aggregation signal strength info |
| + | *** Mobile: fixed wrong mobile data limit used data format for sms messages |
| + | *** Mobile: fixed duplicate data connection event reporting |
| + | *** Mobile: fixed an issue where low signal notifications were displayed without a SIM card |
| + | *** Mobile: fixed modem serial number acquisition after modem reboot |
| + | *** Mobile: fixed an issue when 4G-only network type selection may have resulted in a slower connection to the operator |
| + | *** Mobile: fixed issue where USSD responses were returned in HEX format instead of text format for EC200A module |
| + | *** Mobile: fixed issue where DHCP filter was not set correctly for RG501Q |
| + | *** Mobile: fixed an issue where the wrong IP address was used after a DFOTA upgrade |
| + | *** Multi AP: fixed Multi AP not working with fast roaming |
| + | *** Multi AP: fixed switching to Multi AP mode fails due to encryption |
| + | *** Multi AP: fixed Multi AP configuration being deleted when switching mode on the same radio device |
| + | *** Network: fixed overriding MAC address for interfaces that are bridged |
| + | *** Realtime Traffic: fixed mobile usage by week day translation by device language |
| + | *** RelayD: fixed API error when "network" and "lan_mark" options are not present in a PUT request |
| + | *** SQM: fixed missing PPP mobile device selection in SQM configuration |
| + | *** Wireless: fixed wireless scan results sometimes not being returned |
| + | *** Wireless: fixed wireless status page not updating wireless SSID status after page is opened |
| + | *** Wireless: removed the ability to have different countries in radio configurations |
| + | *** Wireless: fixed interface delete when it's unassigned from the wireless interface in access point mode |
| + | *** Wireless: fixed backticks for WiFi SSID are not allowed in WebUI |
| + | ** <b>Services</b> |
| + | *** BACnet: fixed incorrect BACnet IP port used for sending responses |
| + | *** BGP: fixed route map sequence going out of range |
| + | *** BGP: fixed listen range field allowing multiple entries |
| + | *** Call Utilities: fixed table header switch to be disabled if no rules were created |
| + | *** DLMS: fixed DLMS test response format |
| + | *** DLMS: fixed COSEM group validation |
| + | *** DLMS: fixed API POST error for /dlms/devices/config endpoint |
| + | *** DLMS: fixed serial connection not working after reboot |
| + | *** DNP3 Client: fixed to allow reading objects past 255 index |
| + | *** DNP3 Client: fixed incorrect hints |
| + | *** DNP3 Outstation: fixed serial outstation starting issues |
| + | *** Hotspot: fixed uploading more than one custom theme |
| + | *** Hotspot: fixed creating Hotspot to SSID that is disabled |
| + | *** Hotspot 2.0: fixed Venue name and Operator's name field validations |
| + | *** I/O Juggler: fixed improper dout action config handling |
| + | *** I/O Juggler: updated profile change action |
| + | *** Input/Output: allow unselecting all Post/Get access methods |
| + | *** IPsec: fixed connectivity issues when using WAN failover |
| + | *** IPsec: fixed the instance status when the local firewall option is disabled |
| + | *** Ledman: fixed issue when after some time network type LED starts blinking |
| + | *** Modbus Client: fixed test request option validation |
| + | *** Modbus Client: fixed alarm output action display values |
| + | *** Modbus Client: fixed incorrect period hint |
| + | *** Modbus Server: fixed APN register not clearing APN |
| + | *** Modbus Server: fixed 148 and 164 modbus registers |
| + | *** Modbus Server: fixed incorrect hints |
| + | *** OPC UA Server: fixed not starting while modem is down |
| + | *** OpenVPN: fixed displaying imported files from device |
| + | *** OpenVPN: fixed the private key decryption for cases when a password is used |
| + | *** OpenVPN: fixed data cipher migration |
| + | *** SMPP: fixed username bypass problem |
| + | *** SMPP: fixed password validation |
| + | *** SMS Gateway: fixed SMS to Email recipient formatting according to RFC5322 |
| + | *** SNMP: fixed GSM mSignal OID value type |
| + | *** SNMP: fixed GSM module memory leaks |
| + | *** SSTP: fixed functionality when the default route option is not enabled |
| + | *** Web Filter: fixed whitelist not working for some hosts when using IPv6 |
| + | ** <b>System</b> |
| + | *** Administration: fixed repeated validation on cleared inputs and added validation when new password matches the old one |
| + | *** API Core: fixed API method validation during upload action |
| + | *** API Core: fixed error messages for POST method |
| + | *** API Core: fixed option list validation |
| + | *** Boot: fixed factory settings restore (firstboot) not deleting hidden files |
| + | *** Events Log: fixed refresh button in event log table |
| + | *** IP Block: fixed adding MAC addresses back to whitelist when unblocking all of them |
| + | *** Recipients: made phone number field required |
| + | *** Setup Wizard: fixed lan ip step not changing ip address |
| + | *** Troubleshoot: fixed system log and kernel log buttons to be enabled with read only rights |
| + | *** Update Firmware: fixed misleading "Firmware version" status of "N/A" to "FOTA service is disabled" when FOTA is disabled |
| + | *** Update Firmware: fixed issue when infinite spinner appears after updating device firmware from server without having internet connection |
| + | * <b>CVE Patches</b> |
| + | ** Patched CVE-2023-52425 |
| + | ** Patched CVE-2023-52530 |
| + | ** Patched CVE-2024-25629 |
| + | ** Patched CVE-2024-28757 |
| + | ---- |
| ===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.7.3/RUT9M/RUT9M_R_00.07.07.3_WEBUI.bin RUT9M_R_00.07.07.3]</span></b> | 2024.06.25=== | | ===<b><span class="plainlinks">[https://firmware.teltonika-networks.com/7.7.3/RUT9M/RUT9M_R_00.07.07.3_WEBUI.bin RUT9M_R_00.07.07.3]</span></b> | 2024.06.25=== |
| * <b>Fix</b> | | * <b>Fix</b> |