Aviatrix Controller and Gateway Image Release Notes

Remediates the etcd package vulnerability on CVE-2023-47108.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Removed AWS ssm installation from the base gateway image.

Addressed vulnerability fixes.

Supported dynamic disk image resizing on the Controller.

Hardened to 80% of CIS Server L1 benchmark.

Upgraded the version of MongoDB and Strongswan.

Removed the logstash integration.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync.

Added support for AWS IMDSv2.

Corrected issue with the Aviatrix Controller initialization hanging after image migrating to a new image.

Closed potential vulnerability in old opensource OS versions.

Controller image version 100621 includes Apache version 2.4.51 which closed vulnerabilities CVE-2021-40438, CVE-2021-33193 and vulnerabilities closed in previous Apache releases.

Controller image version 100621 closes a potential denial-of-service vulnerability and corrects an issue with launching controller HA.

R6.1.1280 Software Version is required

Update Linux kernel and packages versions

Remove packages no longer used by the product

Set X-XSS-Protection and X-Content-Type-Options by default

Fix all vulnerabilities up to Jun/2020 (mid ref: 15727)

Contains an upgrade to Linux 5.15.0-1069-aws.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Removed AWS ssm installation from the base gateway image.

Updated security patches to date.

Upgraded the ENA driver to latest (2.8.3):

Improved memory management, CPU utilization, and lock contention.

Improved CPU efficiency when terminating a large number of IPSec tunnels.

Addressed vulnerability fixes.

Supported dynamic disk image resizing on the Controller.

Hardened to 80% of CIS Server L1 benchmark.

Upgraded the version of MongoDB and Strongswan.

Removed the logstash integration.

Updated the kernel version to 5.4.0-1080-aws.

Upgraded the version of an opensource OS versions.

Hardened to 80% of CIS Server L1 benchmark.

Passed a vulnerability scan up to July 2022.

R6.4.2499 Software Version is required

Support new IPSec encryption mechanism

Update security patches to date

Introduced the gateway in AWS China and Ali Cloud

Fix and pass vulnerabilities scan to Feb/2021

R6.2.1837 Software Version is required

New image fetch mechanism

Update security patches to date

Linux Kernel update and package upgrade

New network drivers

Fix and pass vulnerabilities scan to Sep/2020 (mid ref: 18262)

Addressed vulnerability fixes.

Supported dynamic disk image resizing on the Controller.

Hardened to 80% of CIS Server L1 benchmark.

Upgraded the version of MongoDB and Strongswan.

Removed the logstash integration.

Addressed vulnerability fixes.

Supported dynamic disk image resizing on the Controller.

Hardened to 80% of CIS Server L1 benchmark.

Upgraded the version of MongoDB and Strongswan.

Removed the logstash integration.

Contains an upgrade to Linux 5.15.0-1069-aws.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Updated the Linux kernel version to 5.4.0-1084-aws.

Python3 env ready.

Use Strongswan by default.

Fixed issue in which an image upgrade caused dangling volumes on AWS China.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync.

Contains an upgrade to Linux 5.15.0-1069-aws.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed SNTP and upgraded NTP from the base images.

Removed AWS ssm installation from the base gateway image.

Updated the kernel version to 5.4.0-1080-aws.

Upgraded the opensource OS versions.

Hardened to 80% of CIS Server L1 benchmark.

Passed a vulnerability scan up to July 2022.

Remediates the etcd package vulnerability on CVE-2023-47108.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Upgraded to Ubuntu version 18.04.6.

Upgrade the kernel version to 5.4.0-1080.

Image is hardened to 80% of CIS Server L1 compliance.

Fixed and passed a vulnerability scan up to October 2022.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync.

Contains an upgrade to Linux 5.15.0-1072-azure.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Updated security patches to date.

Improved IPSec CPU utilization scalability with number of tunnels.

Dataplane Performance improvements.

Hardening to 80% of CIS Server L1 benchmark.

Passed a vulnerability scan up to January 2023.

Upgraded to Ubuntu version 18.04.6.

Remediated CVE-2022-2914

Image is hardened to 80% of CIS Server L1 compliance.

Fixed and passed a vulnerability scan up to September 2022.

Contains an upgrade to Linux 5.15.0-1072-azure.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Contains an upgrade to Linux 5.15.0-1072-azure.

Contains an upgrade to Linux 5.15.0-121-generic.

Remediates the etcd package vulnerability on CVE-2023-47108.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Addressed vulnerability fixes.

Supported dynamic disk image resizing on the Controller.

Hardened to 80% of CIS Server L1 benchmark.

Upgraded the version of MongoDB and Strongswan.

Removed the logstash integration.

Addressed vulnerability fixes.

Supported dynamic disk image resizing on the Controller.

Hardened to 80% of CIS Server L1 benchmark.

Upgraded the version of MongoDB and Strongswan.

Removed the logstash integration.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync.

Contains an upgrade to Linux 5.15.0-1068-gcp.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Removed AWS ssm installation from the base gateway image.

Image is hardened to 80% of CIS Server L1.

Fixed and passed vulnerability scan up to August 2022.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync.

Remediates the etcd package vulnerability on CVE-2023-47108.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Contains an upgrade to Linux 5.15.0-1067-oci.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Remediates the OpenSSH server vulnerability due to Ubuntu security issue CVE-2024-6387.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Updated security patches to date.

Remediated vulnerabilities.

Incorporated openssl-1.0.2zg.

Removed NTP and SNTP from the base images.

Passed a vulnerability scan up to January 2023.

Contains an upgrade to Linux 5.15.0-121-generic.

Addresses an issue that causes traffic sent to DNS/NTP IPs from Cloud Service Provider DHCP services to be misrouted.

Updates the Aviatrix base image to use the latest industry standard Linux operating system.

Python3 env ready.

Use Strongswan by default.

BC BPF debug tools installed.

Passed a vulnerability scan up to January 2023.

Upgraded Apache, LibNSS3, OpenSSL, Zlib, and Rsync