release: update NEWS with entires from 1.14.6

This commit is contained in:
Thomas Haller 2019-02-23 09:19:49 +01:00
parent 5551b3ab55
commit e4147a7d18

43
NEWS
View file

@ -11,16 +11,51 @@ USE AT YOUR OWN RISK. NOT RECOMMENDED FOR PRODUCTION USE!
* Check connectivity per address family.
* Allow binding a connections lifetime to the DBus client that activated it.
* Add support for establishing Wi-Fi Direct connections (Wi-Fi P2P).
* Use a new type of secret-keys that combines the secret value with /etc/machine-id.
This way when cloning a VM it suffices to change machine-id to generate different
addresses.
* Add support for WireGuard VPN tunnels to NetworkManager. D-Bus API and libnm
support all options. nmcli supports creating and managing WireGuard profiles,
with the exception of configuring and showing peers.
The following changes were backported to 1.14.x releases between 1.14.0
and 1.14.2 are also present in NetworkManager-1.14:
and 1.14.6 are also present in NetworkManager-1.14:
- 1.14.6:
* Fix memory corruption in internal DHCPv6 client (CVE-2018-15688).
* No longer limit number of search entires in resolv.conf to 6.
* Support restricting NetworkManager.conf device configuration based on used DHCP
plugin.
* Add "${MAC}" specifier for connection.stable-id. This uses the current MAC
address for seeding the stable generation of MAC address, DHCP client-id
or IPv6 stable-privacy interface identifier.
* Support special value "duid" for "ipv4.dhcp-client-id". This generates an
RFC4361-compliant client-id like the internal DHCP client used to do by default.
Previously, there was no explicit name for such a client-id and it was not
usable with dhclient DHCP plugin. This also generates the same client-id as
systemd-networkd does by default.
* Support and use a new kind of secret-key in "/var/lib/NetworkManager/secret_key".
The secret-key represents the identity of the machine that is used for various
purposes like generating IPv6 stable privacy addesses. It is now combined
with "/etc/machine-id" so that changing only the machine-id results in new identifiers.
That matters for example when cloning a virtual machine. Previously, the user
hard to prune NetworkManager's secret-key to get a new identity, now regenerating
machine-id suffices. Secret-keys generated by earlier versions of NetworkManager are
not affected and keep their previous behavior.
* Fix the DHCP client-ids based on the MAC address of IPoIB/infiniband devices.
* Fix restoring IP configuration after interface went down.
* No longer let NetworkManager touch rp_filter setting. The rp_filter sysctl must now
be set outside of NetworkManager according to the admin's preference. Note that a strict
rp_filter may break valid use-cases and interacts badly with connectivity checking.
* Various bug fixes and improvements.
- 1.14.4:
* Fix a crash in nmcli when a device is removed while being disconnected.
* Fix a crash in ifupdown (Debian) configuration plugin.
* Fix a daemon crash when a generated connection doesn't validate.
* Fix a memory leak in dhclient DHCP plugin.
* Fix line editing in nmcli password prompts.
* Fix a RPATH in bluetooth and wwan plugin when built with Meson (otherwise
they wouldn't find libnm-wwan.so).
- 1.14.2:
* Fix a bug that could cause NetworkManager to crash after checking
connectivity status.
* Correctly apply a default (-1) metric from DHCP.