Current File : //proc/self/root/backups/router/usr/local/opnsense/changelog/25.7.7.htm
<p>Hi again,</p><p>This update ships a number of third party security updates, firewall live log improvements based on user feedback from 25.7.6, plus minor fixes and improvements like usual.</p><p>One focus at the moment is to get rid of the unsafe shell use in the backend which has been the source of multiple security issues in the project history. A few other things are coming to 25.7.x soon: a neighbor watch daemon, a new NDP proxy plugin and a community theme. Stay tuned. :)</p><p>Here are the full patch notes:</p><p><ul><li>system: simplify RRD backup code and remove exec() usage (reported by Alex Williams from Pellera Technologies working with Trend Zero Day Initiative)</li><li>system: move valid_from search criteria to log_matcher for faster end of search</li><li>system: use file_safe() in gateway monitor watcher</li><li>system: refactor factory reset page to MVC and add a reset per component operating on models</li><li>interfaces: ifctl: always allow reads to internal state files</li><li>firewall: automation: fix alias IP address search</li><li>firewall: automation: allow interface parameter to contain a list of interfaces for API users</li><li>firewall: aliases: replace invalid unicode chars (contributed by Marius Halden)</li><li>firewall: live log: only execute redraw on visibility state transition</li><li>firewall: live log: optimize viewbuffer rendering</li><li>firewall: live log: prevent re-resolving in-flight requests and move host lookup to current filtered view</li><li>firewall: live log: fix data ordering and add table/history limit options</li><li>firewall: live log: use "badge" class like before</li><li>firewall: states: fix delete_selected firewall states (contributed by Alexander Sulfrian)</li><li>dnsmasq: add optgroup support to DHCP option fields and expose all DHCPv4 options</li><li>ipsec: sessions: add datakey property for row mapping</li><li>ipsec: status: search phase 2 triggered twice on click and cleanup tooltip event as well</li><li>openvpn: use file_safe() to write CRL files</li><li>mvc: OptionField: properly translate optgroup</li><li>mvc: JsonKeyValueStoreField: fix race condition when using SourceField in the model</li><li>mvc: persist models description in root attribute of its respective configuration</li><li>rc: secure an exec() in the recovery script</li><li>ui: improve grid responsiveness via minWidth()</li><li>ui: remove this.dataIdentifier as datakey defines the key to be used when asking 'row-id' or getSelectedRows</li><li>ui: SimpleActionButton: add support for icons in action buttons</li><li>ui: recompile default themes using dart sass (1.93.2) which changes color rendering</li><li>ui: keyboard shortcuts for "a"dvanced and "h"elp in MVC pages (contributed by Konstantinos Spartalis)</li><li>ui: bail out on dynamic grid resize if data is loading</li><li>plugins: os-frr 1.48[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/net/frr/pkg-descr">1</a>]</li><li>plugins: os-tayga 1.3[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/net/tayga/pkg-descr">2</a>]</li><li>ports: kea 3.0.2[<a target="_blank" href="https://downloads.isc.org/isc/kea/3.0.2/Kea-3.0.2-ReleaseNotes.txt">3</a>]</li><li>ports: libxml 2.14.6[<a target="_blank" href="https://gitlab.gnome.org/GNOME/libxml2/-/blob/master/NEWS">4</a>]</li><li>ports: php 8.3.27[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.3.27">5</a>]</li><li>ports: sqlite 3.50.4[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.3.27">5</a>]</li><li>ports: strongswan 6.0.3[<a target="_blank" href="https://github.com/strongswan/strongswan/releases/tag/6.0.3">7</a>]</li><li>ports: suricata 8.0.2[<a target="_blank" href="https://suricata.io/2025/11/06/suricata-8-0-2-and-7-0-13-released/">8</a>]</li><li>ports: unbound 1.24.1[<a target="_blank" href="https://nlnetlabs.nl/projects/unbound/download/#unbound-1-24-1">9</a>]</li></ul></p><p>A hotfix release was issued as 25.7.7_2:</p><p><ul><li>system: fix a HA sync regression introduced in 25.7.6 that prevented a sync from succeeding in an edge case</li><li>interfaces: fix overview details button not working</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell