Current File : //backups/router/usr/local/opnsense/changelog/20.1.2.htm
<p>Good evening,</p><p>Today we pick up the recent FreeBSD security advisories as well as the usual noise in bugfixes and third party updates. We are also at the brink of a first HardenedBSD 12.1 based image so stay tuned.</p><p>Here are the full patch notes:</p><p><ul><li>system: fix leap year issue in new log reader</li><li>system: add valid from and to dates to user certs display</li><li>system: drop unused services.inc and diag_logs_template.inc</li><li>interfaces: make sure descriptions are properly cleansed</li><li>interfaces: introduce interfaces_primary_address6()</li><li>interfaces: validate interface input in packet capture</li><li>firewall: immediately download GeoIP if not already found</li><li>firewall: improve performance when working with large number of aliases</li><li>firewall: fix visibility on internal CARP rules</li><li>captive portal: fix expiry and validity for vouchers (contributed by xx4h)</li><li>dhcp: fix DNS registration for DHCPv6 static mappings (contributed by maurice-w)</li><li>dhcp: add icons next to online/offline lease status (contributed by Tyler Ham)</li><li>ipsec: allow configuration of inactivity parameter (contributed by Marcel Menzel)</li><li>unbound: minor changes while scanning ACL subnets</li><li>web proxy: work around to skip passing additional auth properties</li><li>backend: allow pluginctl to return config.xml values</li><li>console: improve type checks in set address function</li><li>rc: join CARP early startup scripts</li><li>plugins: os-dnscrypt-proxy fix for setup.sh on reboot</li><li>plugins: os-dyndns 1.20 fixes verify restrictions, GratisDNS and missing break for Linode (contributed by NOYB, Johan Pramming, Andrew Gunnerson)</li><li>plugins: os-maltrail 1.4[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/security/maltrail/pkg-descr">1</a>]</li><li>plugins: os-nrpe fix for setup.sh on reboot</li><li>plugins: os-tinc 1.5 fixes bug in IPv6 support (contributed by vnxme)</li><li>src: fix imprecise ordering of SSP canary initialization[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-20:01.ssp.asc">2</a>]</li><li>src: fix nmount invalid pointer dereference[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-20:02.nmount.asc">3</a>]</li><li>src: fix libfetch buffer overflow[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:01.libfetch.asc">4</a>]</li><li>src: fix kernel stack data disclosure[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:03.thrmisc.asc">5</a>]</li><li>ports: ca_root_nss 3.50</li><li>ports: php 7.2.28[<a target="_blank" href="https://www.php.net/ChangeLog-7.php#7.2.28">6</a>]</li><li>ports: squid 4.10[<a target="_blank" href="http://squid.mirror.colo-serv.net/archive/4/squid-4.10-RELEASENOTES.html">7</a>]</li><li>ports: suricata 4.1.7[<a target="_blank" href="https://suricata-ids.org/2020/02/13/suricata-4-1-7-released/">8</a>]</li><li>ports: syslog-ng 3.25.1[<a target="_blank" href="https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.25.1">9</a>]</li><li>ports: unbound 1.10.0[<a target="_blank" href="https://nlnetlabs.nl/projects/unbound/download/">10</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell