Current File : //backups/router/usr/local/opnsense/changelog/22.1.7.htm
<p>Hi there,</p><p>This is a small maintenance release which fixes known vulnerabilities in OpenSSL et al. Note that we are preparing for upgrade of Phalcon 5 framework and PHP 8.0 inclusion on our way to 22.7.</p><p>Here are the full patch notes:</p><p><ul><li>system: tunables without hierarchy are just "environment" variables</li><li>system: use PHP random_bytes() builtin (contributed by oittaa)</li><li>system: support cd9660 file system in opnsense-importer</li><li>reporting: fix validation in NetFlow settings</li><li>interfaces: interface_ppps_configure() remove boot-time side effect</li><li>interfaces: include VIPS for primary IPv4 detection</li><li>interfaces: DHCPv6 advanced has a different flag to disable NA</li><li>firewall: add missing range validation to alias host type</li><li>firewall: make rule parsing more consistent as x:any and any:y are valid port options</li><li>captive portal: simplify the voucher generation code (contributed by oittaa)</li><li>firmware: list locked packages in health audit</li><li>ipsec: mark non-sortable columns</li><li>openvpn: change filetype of export to text/ovpn</li><li>unbound: updated no coin list (contributed by Luis Nachtigall)</li><li>unbound: change overrides grid label when no results are returned</li><li>unbound: restore duplicate domain behaviour in overrides</li><li>mvc: safeguard multi_sort in searchRecordsetBase()</li><li>mvc: prevent silent crashes in legacy XML attribute emulation</li><li>mvc: Phalcon 5 migration layer to reduce dependencies on Phalcon builtins</li><li>mvc: fix two regressions and deprecate __items</li><li>plugins: os-acme-client 3.10[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.1/security/acme-client/pkg-descr">1</a>]</li><li>plugins: os-bind 1.23[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.1/dns/bind/pkg-descr">2</a>]</li><li>plugins: os-dnscrypt-proxy 1.12[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.1/dns/dnscrypt-proxy/pkg-descr">3</a>]</li><li>plugins: os-frr 1.28[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.1/net/frr/pkg-descr">4</a>]</li><li>plugins: os-relayd 2.7 adds listen address and port range to virtual servers</li><li>plugins: os-zabbix-agent 1.12[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.1/net-mgmt/zabbix-agent/pkg-descr">5</a>]</li><li>plugins: os-zabbix-proxy 1.8[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.1/net-mgmt/zabbix-proxy/pkg-descr">6</a>]</li><li>ports: curl 7.83.0[<a target="_blank" href="https://curl.se/changes.html#7_83_0">7</a>]</li><li>ports: nss 3.78[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_78.html">8</a>]</li><li>ports: openssl 1.1.1o[<a target="_blank" href="https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md">9</a>]</li><li>ports: pcre2 10.40[<a target="_blank" href="https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.40">10</a>]</li><li>ports: php 7.4.29[<a target="_blank" href="https://www.php.net/ChangeLog-7.php#7.4.29">11</a>]</li><li>ports: pkg 1.17.5[<a target="_blank" href="https://github.com/freebsd/freebsd-ports/commit/18793d10585f">12</a>]</li><li>ports: suricata 6.0.5[<a target="_blank" href="https://forum.suricata.io/t/suricata-6-0-5-and-5-0-9-released/2415">13</a>]</li></ul></p><p>A hotfix release was issued as 22.1.7_1:</p><p><ul><li>mvc: add missing URL validator class</li><li>plugins: os-nginx fix for validation class</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell