Current File : //backups/router/usr/local/opnsense/changelog/23.7.10.htm
<p>Hi!</p><p>A number of FreeBSD source code changes accumulated so it is better to have them delivered to your doorstep before the holidays are in full swing.</p><p>Here are the full patch notes:</p><p><ul><li>system: improve config revision audit ability</li><li>system: cleanse system_get_language_code() output</li><li>system: safeguard /tmp/PHP_errors.log file before usage</li><li>system: add an optional random delay before executing remote backups</li><li>system: fix regression in log viewer level selector</li><li>reporting: OpenVPN server instances were missing from respective health graph</li><li>interfaces: move interface list widget link to assignments page</li><li>interfaces: add new backend jobs and extend with optional parameter</li><li>interfaces: add validation for proxy ARP strict subnet use</li><li>firewall: improve alias write behaviour by checking for changes beforehand</li><li>firewall: fix preg_replace() to avoid truncated network display in rules listing</li><li>firewall: add an ifconfig.debug file</li><li>firmware: switch bogons/changelog set base URL to portable "opnsense-update -X" call</li><li>ipsec: move save button on mobile page into its own container</li><li>ipsec: add support for RADIUS class groups in instances</li><li>unbound: use tls-system-cert instead of tls-cert-bundle</li><li>web proxy: fix setting unknown language directory</li><li>ui: upgrade jqTree to version 1.7.5</li><li>plugins: os-ddclient 1.18[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/23.7/dns/ddclient/pkg-descr">1</a>]</li><li>plugins: os-dec-hw 1.0 is a Deciso hardware specific dashboard widget</li><li>plugins: os-net-snmp fix for directory setup (contributed by doktornotor)</li><li>plugins: os-telegraf 1.12.10[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/23.7/net-mgmt/telegraf/pkg-descr">2</a>]</li><li>plugins: os-upnp now reloads on newwanip event</li><li>plugins: os-wireguard fix for missing firewall reload</li><li>plugins: os-wireguard-go fix for device registration</li><li>src: clang: sanitizer failure with ASLR enabled[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-23:15.sanitizer.asc">3</a>]</li><li>src: dhclient: do not add 0.0.0.0 interface alias</li><li>src: ice: match irdma interface changes</li><li>src: ixv: separate VFTA table for each interface</li><li>src: libnetmap: better fix for port parsing failure</li><li>src: pf: expose more syncookie state information to userspace</li><li>src: pf: fix mem leaks upon vnet destroy</li><li>src: pf: remove incorrect fragmentation check[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-23:17.pf.asc">4</a>]</li><li>src: rc: fix restart _precmd issue with _setup</li><li>src: re: add support for 8168FP HW rev</li><li>src: zfs: check dnode and its data for dirtiness in dnode_is_dirty()[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-23:16.openzfs.asc">5</a>]</li><li>ports: perl 5.36.3[<a target="_blank" href="https://perldoc.perl.org/5.36.3/perldelta">6</a>]</li><li>ports: php 8.2.13[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.3.13">7</a>]</li><li>ports: phpseclib 3.0.34[<a target="_blank" href="https://github.com/phpseclib/phpseclib/releases/tag/3.0.34">8</a>]</li><li>ports: squid update fixes parent proxy crash[<a target="_blank" href="https://github.com/squid-cache/squid/commit/b6c01a2">9</a>]</li><li>ports: strongswan 5.9.13[<a target="_blank" href="https://github.com/strongswan/strongswan/releases/tag/5.9.13">10</a>]</li></ul></p><p>A hotfix release was issued as 23.7.10_1:</p><p><ul><li>mvc: provide iterateRecursiveItems() in BaseModel required by IPsec RADIUS support</li><li>ports: openssh 9.6p1[<a target="_blank" href="https://www.openssh.com/txt/release-9.6">11</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell