AstLinux 1.4.4

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.38.3, 16.21.1

• Added SIP threats blocklist 'apiban', requires an API Key in /mnt/kd/apiban.conf via https://apiban.org/

• Traffic Shaping, add CAKE support, both "Network -> Firewall -> Traffic Shaping" and "Network -> WAN Failover"

• 2.5G ethernet support for Intel i225 (igc) and Realtek RTL8125 (r8125) NICs

• '13se' version now uses Asterisk 13.38.3, "Security Fixes Only" version for Asterisk 13

• Linux Kernel 4.19.208, security and bug fixes

• RUNNIX, version bump to runnix-0.6.5

• OpenSSL, version bump to 1.1.1l, security fixes

• LibreTLS, version bump to 3.4.1

• WireGuard VPN, module 1.0.20210606 (no change), tools 1.0.20210914 (version bump)

• libcurl (curl) version bump to 7.79.1

• arnofw (AIF), reload-blocklist-netset script, add support for 'apiban'

• acme-client, version bump to 2.9.0

• Monit, version bump to 5.29.0

• prosody, version bump to 0.11.10

• vnStat, version bump to 2.8

• zabbix, version bump to 4.0.35

• Asterisk '13se' (stable edition) version 13.38.3 is the latest Asterisk 13.x "Security Fixes Only" version, built --without-pjproject

• Package upgrades providing important security and bug fixes

AstLinux 1.4.3

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.29.2, 13.38.2, 16.19.0
• Linux Kernel 4.19.196, security and bug fixes
• RUNNIX, version bump to runnix-0.6.4
• OpenSSL, version bump to 1.1.1k, security fixes
• OpenVPN, version bump to 2.4.11
• WireGuard VPN, module 1.0.20210606 (version bump), tools 1.0.20210424 (version bump)
• libcurl (curl) version bump to 7.77.0
• libxml2, version bump to 2.9.12
• LibreTLS, new package, version 3.3.3p1, a port of libtls from LibreSSL to OpenSSL
• chrony, version bump to 4.1
• Monit, version bump to 5.28.0
• msmtp, version bump to 1.8.15, switch TLS support to libtls (LibreTLS via OpenSSL)
• prosody, major version bump to 0.11.9
• vnStat, version bump to 2.7
• zabbix, version bump to 4.0.31
• phoneprov-tools, add support for @CID_NUM@ and @CID_NUM1@ to @CID_NUM6@ template variables.
• Package upgrades providing important security and bug fixes

AstLinux 1.4.2

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.29.2, 13.38.2, 16.16.2
• Linux Kernel 4.19.177, security and bug fixes
• ipsec-tools (racoon) package has been removed.
• OpenSSL, version bump to 1.1.1j, security fixes
• OpenVPN, version bump to 2.4.10
• WireGuard VPN, module 1.0.20210219 (version bump), tools 1.0.20210223 (version bump)
• dnsmasq, version 2.84, patch: upstream DNS retries regression fix
• unbound, version bump to 1.13.1
• sudo, version bump to 1.8.32, security fixes
• zabbix, version bump to 4.0.29
• vnStat, new package, version 2.6, interface counter history is saved to /mnt/kd/vnstat/vnstat.db every hour.
  Enabled by default to keep a log of network traffic for external interface(s). No sniffing of traffic is performed.
  New rc.conf variable VNSTAT_ENABLE can be set to "no" to disable.
• Web Interface, added vnStat tab, available to "admin/staff" users. Hidden by default in Prefs tab.
• All Asterisk versions now have sRTP replay protection, new rtp.conf config option: srtpreplayprotection=yes
  This new rtp.conf option is enabled by default.
  Buggy SIP user agents may require srtpreplayprotection=no if audio issues occur with sRTP streams.
• Package upgrades providing important security and bug fixes

AstLinux 1.4.1

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.29.2, 13.38.1, 16.15.1
• Linux Kernel 4.19.167, security and bug fixes
• RUNNIX, version bump to runnix-0.6.3, with Linux Kernel 4.19.167, kexec 2.0.21
• OpenSSL, version bump to 1.1.1i, security fix
• WireGuard VPN, module 1.0.20210124 (version bump), tools 1.0.20200827 (no change)
• dnsmasq, version bump to 2.84, important security fixes
• getdns/stubby, remove package, replace getdns/stubby with unbound for DNS-over-TLS
• unbound, version bump to 1.13.0
• PPPoE client, reimplement using the latest pppd 2.4.9 pppoe kernel driver and our custom scripts
• rng-tools, jitterentropy version bump to 3.0.1 (2x improved performance on APU systems)
• sudo, critical security fix
• sngrep, version bump to 1.4.8
• zabbix, version bump to 4.0.27
• Package upgrades providing important security and bug fixes

AstLinux 1.4.0

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.29.2, 13.36.0, 16.13.0
• Linux Kernel 4.19.146, major bump from 3.16.x series
• RUNNIX, version bump to runnix-0.6.2, with Linux Kernel 4.19.146, e2fsprogs 1.45.6, util-linux 2.33.2
• WireGuard VPN, version bump, module 1.0.20200908, tools 1.0.20200827
• iproute2 (ip, tc, bridge, etc.) version bump to 4.20.0
• iptables, version bump to 1.8.4
• Fossil, version bump to 2.10.2, security fixes
• acme-client, version 2.8.7, add email notify support
• dnsmasq, version bump to 2.82, performance improvements and bug fixes
• util-linux, version bump to 2.33.2, add 'nsenter' command
• zabbix, version bump to 4.0.24
• Asterisk '13se' (stable edition) version 13.29.2 is older than latest Asterisk 13.x version but more tested, built --without-pjproject
• pjsip, version bump to 2.10
• DAHDI, version bump to dahdi-linux 3.1.0 and dahdi-tools 3.1.0, required to support the new kernel
  Previous DAHDI_HFCS and RHINO drivers are no longer supported
  Add patch to return DAHDI support for (wctdm24xxp) TDM800P/AEX800 and TDM410P/AEX410 PCI cards
  Add patch to return DAHDI support for (wctdm) TDM400P PCI cards
  Add patch to return DAHDI support for (wcfxo) X100P PCI cards
• Package upgrades providing important security and bug fixes

Previous Asterisk 11.x users are encouraged to switch to the new Asterisk '13se' (stable edition). Some configuration changes will be needed, though minimal.

AstLinux 1.3.10

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.29.2, 13.34.0, 16.11.1
• Upgrade to Linux Kernel 3.16.85, including the new x86_64 RUNNIX bootloader, security and bug fixes
  Kernel config: Add NAMESPACES and CGROUPS for Linux Containers
• New toolchain: glibc 2.27, binutils 2.29.1, gcc 6.5.0, using crosstool-ng-1.24.0
• unionfs, move from old kernel unionfs to FUSE unionfs version 2.1
  To better secure the filesystem, now only '/etc' and '/stat' will be read-write over the read-only base firmware image.
• lxc, new package, add support for guest Linux Containers. For example, run Pi-hole or the UniFi Controller.
• OpenSSL, version bump to 1.1.1g
• WireGuard VPN, version bump, module 1.0.20200712, tools 1.0.20200513
• OpenVPN, version bump to 2.4.9
• udev, now use eudev version 3.2.9
• zabbix, major version bump to 4.0.20, LTS series
• initial-setup, remove 'combined' partition format option, always use 'format separate'
• Asterisk '13se' (stable edition) version 13.29.2 is older than latest Asterisk 13.x version but more tested, built --without-pjproject
• Package upgrades providing important security and bug fixes

Previous Asterisk 11.x users are encouraged to switch to the new Asterisk '13se' (stable edition). Some configuration changes will be needed, though minimal.

AstLinux 1.3.8

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.23.1, 13.31.0, 16.8.0
• Upgrade to Linux Kernel 3.16.82, including the RUNNIX bootloader, security and bug fixes
• OpenSSL, version bump to 1.1.1f
• pppd, version bump to 2.4.8, security fix: CVE-2020-8597
• WireGuard VPN, first official release 1.0.20200330, backport of its incorporation into the Linux Kernel 5.6
• OpenVPN, version bump to 2.4.8
• chrony, version bump to 4.0-pre1, adds 'maxsamples 1' and 'chronyc -N sources' support
• acme-client, version bump to 2.8.5
• arp-scan, version bump to 1.9.7, fixed with libpcap version 1.9.1
• ncurses, version bump to 6.2
• ne, version bump to 3.3.0
• Asterisk '13se' (stable edition) version 13.23.1 is older than latest Asterisk 13.x version but more tested, built --without-pjproject
• Package upgrades providing important security and bug fixes

Previous Asterisk 11.x users are encouraged to switch to the new Asterisk '13se' (stable edition). Some configuration changes will be needed, though minimal.

AstLinux 1.3.7.1

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	AstLinux Install ISO ISO SHA256

• Asterisk Versions: 13.23.1, 13.29.2, 16.6.2
• Asterisk security patches: AST-2019-006, AST-2019-007, AST-2019-008

AstLinux 1.3.7

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	https://www.astlinux-project.org

• Asterisk Versions: 13.23.1, 13.29.1, 16.6.1
• Upgrade to Linux Kernel 3.16.74, including the RUNNIX bootloader, security and bug fixes
• OpenSSL, major version bump to 1.1.1d, the new LTS series. The previous 1.0.2 LTS series is EOL at the end of 2019
• Note: Many packages required version bumps or patches to be compatible with the new OpenSSL 1.1 API
• acme-client, add upstream patch from 2.8.3 to fix (important) Let's Encrypt CDN changes
• php, major version bump to 7.2.23, adds OpenSSL 1.1 compatibility
• Web Interface Edit tab, add support for CodeMirror text editing
• Fossil, major version bump to 2.9, adds numerous enhancements to the look and feel of the web interface
• iprange, new command, version 1.0.4, a tool capable of managing sets of IPs
• arnofw (AIF), reload-blocklist-netset cron script, add new netset types
• arnofw (AIF), wireguard-vpn plugin, add support for WG->Local TCP/UDP INPUT policy firewall rules
• WireGuard VPN, latest development snapshot during its incorporation into the mainline Linux Kernel
• Asterisk '13se' (stable edition) version 13.23.1 is older than latest Asterisk 13.x version but more tested, built --without-pjproject
• Package upgrades providing important security and bug fixes

Previous Asterisk 11.x users are encouraged to switch to the new Asterisk '13se' (stable edition). Some configuration changes will be needed, though minimal.

AstLinux 1.3.6

	Please do not use the github generated Source code (zip) and (tar.gz) files, but our own Install ISO's instead:
Install ISO's	https://www.astlinux-project.org

• Asterisk Versions: 13.23.1, 13.27.0, 16.4.0
• Upgrade to Linux Kernel 3.16.69, including the RUNNIX bootloader, security and bug fixes
• busybox, major version bump to 1.30.1, security and bug fixes
• ne, new package, version 3.1.2, the nice editor, alternative to nano, including syntax highlighting
• Asterisk 11.x is no longer included, officially EOL 2017-10-25
• Asterisk '13se' (stable edition) version 13.23.1 is included, older than latest Asterisk 13.x version but more tested, built --without-pjproject
• Asterisk 16.x is now included in the Install ISO and "ast16-firmware-1.x" repository
• Asterisk CDR's, when a Dial() has a B() option 'Return(IgnoreNoAnswerCDR)' ignore unanswered events
• WireGuard VPN, latest development snapshot during its incorporation into the mainline Linux Kernel
• Web Interface, Network, Edit tabs, add "Reload WireGuard VPN" support to apply peer changes/additions/deletions
• Web Interface, Status tab, add "ChangeLog" link to display changes since AstLinux 1.2.0 using local file storage
• Package upgrades providing important security and bug fixes

Previous Asterisk 11.x users are encouraged to switch to the new Asterisk '13se' (stable edition). Some configuration changes will be needed, though minimal.