[Announcement] v1.4.17 Release
Julius Pfrommer
Dear all,
There is now another maintenance release v1.4.17 for the currently "oldstable" 1.4 release series.
You can get it on Github at https://github.com/open62541/open62541/releases/tag/v1.4.17.
The release notes are below.
Thanks to everybody whose effort contributed to this release.
Regards,
Julius Pfrommer
Dr. Julius Pfrommer
General Manager | o6 Automation GmbH
Rintheimer Straße 23, 76131 Karlsruhe
Web: https://www.o6-automation.com
This is the seventeenth patch release v1.4.17 of the 1.4 release series of open62541.
open62541 (http://open62541.org) is an open source implementation of OPC UA (OPC Unified Architecture / IEC 62541) written in the C language. The library is usable with all major compilers and provides the necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications. The open62541 library is platform independent: All platform-specific functionality is implemented via exchangeable plugins for easy porting to different (embedded) targets.
open62541 is licensed under the Mozilla Public License v2.0 (MPLv2). This allows the open62541 library to be combined and distributed with any proprietary software. Only changes to the open62541 library itself need to be licensed under the MPLv2 when copied and distributed. The plugins, as well as the server and client examples are in the public domain (CC0 license). They can be reused under any license and changes do not have to be published.
The important changes compared to the previous release v1.4.16 are:
- core: Fix integer overflow in array decoding
- core: Fix the case where the last chunk may exceed the max message size
- arch: Implement UDP interface selection on MacOS
- pubsub: Guard DataSetPayload JSON field count against UA_UInt16 overflow
- server: Deny transfer of detached subscriptions in default access control
- server: Apply allowBrowseNode access control in TranslateBrowsePathsToNodeIds
- server: Enforce default message and chunk size limits to prevent DoS
- server: Guard securityPolicyUriPostfix against empty URI
- server: Variables with DataSource and SamplingInterval=0 receive DataChangeNotifications
- server: Correctly guard anonymous-only TransferSubscription path
- server: Allow anonymous subscription transfer on secure channels with matching ApplicationUri
- server: Enforce AccessLevel StatusWrite and TimestampWrite bits
- pubsub: Prevent null pointer dereference in removeGroupAction
- deps: Fix dtoa buffer offsets
New features and major changes compared to the previous release series 1.3 include:
- core: Switch to an EventLoop model for the control flow
- core: Support for OpenSSL 3.0
- core: Add the Aes256-Sha256-RsaPss security policy
- core: Automatically unwrap ExtensionObject arrays inside UA_Variant
- core: txtime feature for time-based sending of Ethernet packets (Linux only)
- client/server/pubsub: Server, Client and PubSub API are thread-safe with internal locks
- client/server: Private key password protection with a userland callback (client and server)
- client/server: Authentication with x509 certificates (client and server)
- client/server: Support for session-specific server locales (nodes can have localized Description and DisplayName)
- client: Make connection properties in the client accessible via the API
- client: Allow setting a custom SessionName in the client config
- client: Consider the request timeoutHint in synchronous service calls of the client
- server: Implementation of the TransferSubscription and Cancel Service
- server: File-based server configuration using a JSON5 configuration file
- server: Make Session properties in the server accessible via the API
- server: Use an encrypted SecureChannel for registering at a Discovery Server
- server: MonitoredItems with negative sampling interval (linked to the publish interval of the Subscription)
- server: Integration with the NodesetLoader project for runtime parsing and integration of Nodeset XML files
- server: Session and Subscription Diagnostics as part of the server object
- server: Support for the AccessLevelEx attribute
- server: Support for EventFilters
- server: ReverseConnect for the Server
- server: Use config->shutdownDelay delay for the server shutdown
- server: Use dedicate PKI for SecureChannel and Session certificates
- pubsub: Support for the PubSub SKS (Security Key Service)
- pubsub: Support for PubSub UDP Unicast
- pubsub: PubSub StandaloneSubscribedDataSets information model representation