iXsystems heeft een update voor versie 25.10 van TrueNAS Scale uitgebracht, ook wel Goldeye genaamd. Met TrueNAS kan een computer als network attached storage worden ingezet. TrueNAS is een doorontwikkeling van FreeNAS, die op FreeBSD was gebaseerd, en eind 2023 uitgefaseerd is naar maintenance mode. TrueNAS Scale is gebaseerd op Linux/Debian en de gratis variant wordt sinds begin 2025 aangeduid als TrueNAS Community Edition. De belangrijkste veranderingen die in versie 25.10.3.1 zijn aangebracht zijn hieronder voor je op een rijtje gezet.
Notable changes:Click here to see the full 25.10 changelog or visit the TrueNAS 25.10.3.1 (Goldeye) Changelog in Jira.
- Mitigates CVE-2026-31431, a CVSS 7.8 local privilege escalation vulnerability in the Linux kernel AEAD cryptographic socket interface (CWE-669: Incorrect Resource Transfer Between Spheres). While the specific attack vector does not directly affect ZFS, TrueNAS integrates the upstream kernel patch as a security best practice. The fix reverts AEAD socket operations to out-of-place mode, eliminating the incorrect resource transfer between memory spheres that the vulnerability exploits.
- Fixes Kerberos-secured NFS mounts failing after HA failover or system reboot when the NFS service is not configured to start automatically (NAS-138933). When the NFS service did not have Start Automatically enabled, gssproxy failed to initialize when the service was started manually after a reboot or failover, causing
/proc/net/rpc/use-gss-proxyto return 0. Kerberos-secured NFS mounts (krb5, krb5i, and krb5p) were unavailable as a result. This affected systems joined to both FreeIPA and Active Directory.- Restores SNMP visibility for ZFS filesystem datasets and adds a new MIB table covering the full dataset tree. A long-standing regression caused the SNMP agent to report only zvols, silently omitting filesystem datasets from network monitoring tools such as Zabbix and Nagios. The SNMP agent now enumerates the complete dataset tree. A new
datasetTableMIB entry exposes both filesystems and zvols with index, descriptor, and used, available, and referenced byte counts. The existingzvolTableis unchanged, so monitoring configurations that already poll it continue to work.
