This is a maintenance release with important updates for the rsync service.
Updates to the rsync daemon mode to address recent CVEs (NAS-133561).
See the TrueNAS Security Advisories for more details about the CVEs, including the iXsystems response.
Port additional upstream fix for the rsync daemon (NAS-133755).
TrueNAS 13.3-U1. is intended solely for community users looking for incremental fixes specific to FreeBSD 13.3, Jails, Bhyve, OpenZFS, and Samba. See the official announcement for details and upgrade recommendations.
13.3-U1.1 is not available for Enterprise system upgrades. TrueNAS 13.0 remains the recommended option for Enterprise deployments in a stable production environment. TrueNAS 13.0 continues to be supported with security hotfixes and resolutions for any newly discovered major bugs.
Thanks for using TrueNAS CORE! As always, we appreciate your feedback!
…and, fittingly, the download link takes to a page which offers 13.0-U.6.7 (fixed!) or 13.3-U1, not U.1.1. Same marketing team lagging behind engineering!
Maybe it would have helped to just number these releases 13.0-U7 and 13.3-U2 rather than Ux.y? (Even the title of this thread is wrong…)
We have a process that we like to keep consistent.
U7 implies a planned update that has had 2-3 weeks of QA testing across our entire product line. That’s an expensive and slow process. We use it when there are many software fixes.
U6.7 implies an unplanned hot-patch that has had specific testing on the hot-patch and some general QA testing. It assumes only the hot-patch needs to be rigorously tested. We use this process if the hot-patch is urgent for customers or the wider community.
As users, you may or may not want to know how the sausage is made.
As the sausage makers, we want to keep track of the sausage quality so we can avoid poisonings and excessive testing. Otherwise, our factory will be closed by either the health inspectors or the accountants.
Fair enough, but it seems that the sub-numbering scheme results in version strings with more dots than the people in charge could parse to publlish the right file.
The title is now corrected; the download page, not yet.
After some trial and error, I may have found the right link to download 13.3-U1.1.