Current File : //backups/router/usr/local/opnsense/changelog/25.7.3.htm
<p>Howdy!</p><p>The Tabulator introduction into MVC grid views was a major success with virtually no complaints. Did you notice? Maybe you will now that more features have been unlocked: Dnsmasq grids group by interfaces, firewall automation rules now can show folders using categories and row count default and selections have been increased. A few performance and UX tweaks were carried out as well while at it.</p><p>StrongSwan moves to version 6.0.1 now after elaborate testing. The "make_before_break" value was flipped from off to on in their version jump, but the settings will still default to off for everyone unless already otherwise configured.</p><p>Here are the full patch notes:</p><p><ul><li>system: properly check request type on HA status page in restartAllAction() (reported by Stanislav Fort of Aisle Research)</li><li>system: prevent misconfigurations with the automatic user creation option</li><li>system: add pluginctl hook for cache_flush</li><li>system: rewrite wwwonly bootstrap procedure</li><li>system: allow authentication events from wwwonly user</li><li>interfaces: moved get_real_interface() to util.inc</li><li>firewall: add "quick" mode in alias update to skip table size comparison during schedules</li><li>firewall: adjust firewall_rule_lookup to open correct interface and rule from firewall live log</li><li>firewall: add port alias selection to source_port and destination_port</li><li>firewall: implement alias description tooltip and other UX tweaks</li><li>firewall: add optional Tabulator tree view to show categories as rule folders in automation</li><li>firewall: put sequence and sort_order in advanced mode of automation rules</li><li>firewall: front-end table rendering performance improvement for alias diagnostics</li><li>firewall: also set groups for special IPv6 interfaces</li><li>firewall: ignore empty lines for pf table counting</li><li>firewall: support tags in source NAT automation rules</li><li>firewall: allow alias nesting for URL tables</li><li>captive portal: move backend scripts directory</li><li>captive portal: various style cleanups</li><li>captive portal: restyle default login template</li><li>dnsmasq: add Tabulator "groupBy" functionality to group by interfaces</li><li>dnsmasq: add leases widget that shows latest leases</li><li>firmware: add US east coast mirror for business edition</li><li>firmware: opnsense-patch: fix cache flush using new hook</li><li>firmware: add vuxml.freebsd.org to CRL handling hostnames</li><li>intrusion detection: fix downloads tab not loading with Tabulator</li><li>ipsec: add default value to "make_before_break" that retains disabled default</li><li>monit: move backend scripts directory</li><li>mvc: BaseModel: minor non-functional cleanups</li><li>mvc: ModelRelationField: keep array structure in memory to avoid reinitiating object construction</li><li>mvc: tweaked model definitions, especially descriptions and validation message style</li><li>mvc: slightly adjust two getOption() calls in constraints</li><li>mvc: BaseListField: always map values in getDescription()</li><li>mvc: BaseListField: account for option container and passthrough value</li><li>mvc: remove getCurrentValue() compatibility wrapper</li><li>mvc: Backend: always return strings in configdRun() and configdpRun()</li><li>mvc: improve replaceInputWithSelector() to support an empty placeholder</li><li>mvc: stream output not properly cleansed when used in widget (reported by Stanislav Fort of Aisle Research)</li><li>ui: bootgrid: add tabulatorOptions to translateCompatOptions()</li><li>ui: bootgrid: raise rowCount default to 50 and adjust selections accordingly for most pages</li><li>ui: bootgrid: simplify custom grid command additions</li><li>plugins: os-caddy 2.0.3[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/www/caddy/pkg-descr">1</a>]</li><li>plugins: os-frr 1.47[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/net/frr/pkg-descr">2</a>]</li><li>plugins: os-netbird 1.0 (contributed by Gauss23 and Bethuel Mmbaga)</li><li>plugins: os-nginx 1.35[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/www/nginx/pkg-descr">3</a>]</li><li>plugins: os-squid 1.3[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/www/squid/pkg-descr">4</a>]</li><li>src: libfetch: ignore leaf certificates missing CRL which in practice is not offered by most authorities</li><li>src: assorted network stack fixes via stable/14</li><li>src: if_ovpn: support IPv6 link-local addresses</li><li>src: if_ovpn: support floating clients</li><li>src: if_ovpn: fill out sin_len/sin6_len</li><li>src: if_ovpn: destroy cloned interfaces via a prison removal callback</li><li>src: ifconfig: support VLAN ID in static/deladdr</li><li>ports: krb5 1.22.1[<a target="_blank" href="https://web.mit.edu/kerberos/krb5-1.22/">5</a>]</li><li>ports: nss 3.115.1[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_115_1.html">6</a>]</li><li>ports: perl 5.42.0[<a target="_blank" href="https://perldoc.perl.org/5.42.0/perldelta">7</a>]</li><li>ports: php 8.3.25[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.3.25">8</a>]</li><li>ports: strongswan 6.0.1[<a target="_blank" href="https://github.com/strongswan/strongswan/releases/tag/6.0.0">9</a>][<a target="_blank" href="https://github.com/strongswan/strongswan/releases/tag/6.0.1">10</a>]</li></ul></p><p>A hotfix release was issued as 25.7.3_3:</p><p><ul><li>system: fix two regressions due to stream output path safety addition</li><li>firewall: fix interface_net aliases not being populated</li><li>intrusion detection: revert "fix downloads tab not loading with Tabulator"</li></ul></p><p>A hotfix release was issued as 25.7.3_4:</p><p><ul><li>mvc: setDefault() not fired as setValue() was set with an empty string</li></ul></p><p>A hotfix release was issued as 25.7.3_7:</p><p><ul><li>firewall: fix return value when failing to resolve host entries for aliases and no previous content is known</li><li>ipsec: fix bulk operations in SPD page</li><li>mvc: allow empty responses to fix a regression due to stream output safety path addition</li></ul></p><p><br>Stay safe and proud,<br> Your OPNsense team</p>
Mini Shell