|
|
# Release v6.0.2
|
|
|
|
|
|
This firmware release contains two software hot-fixes to release v6.0.1. One fixes build errors on Ubuntu 20.04 (see issue #246), but does not solve build issues on Ubuntu 22.04 (see issue #269). The second fix (the reason for this release) disables by default the web interface.
|
|
|
This firmware release contains two software hot-fixes to release v6.0.1. One fixes build errors on Ubuntu 20.04 (see issue #246), but does not solve build issues on Ubuntu 22.04 (see issue #269). The second fix (the reason for this release) disables by default the web interface (see issue #266).
|
|
|
A number of serious security vulnerabilities were found in the web interface (including CVE-2023-22577). Please note that it is still possible to enable web interface in run-time by changing the option `CONFIG_HTTPD_DISABLE` in dot-config. **Users are strongly discouraged from using the web interface.** In exceptional cases the use of web-interface can be limited to well controlled networks.
|
|
|
|
|
|
The gateware, configuration (except `CONFIG_HTTPD_DISABLE`) and documentation (except wrs-user-manual) remain unchanged from v6.0. *wrs-user-manual* was updated with with the justification why the web interface is disabled by default on a switch. Please note that in the documentation for the release v6.0 there is an statement that the web interface is disabled by default, which was not true.
|
... | ... | |