Current File : //backups/router/usr/local/opnsense/changelog/24.1.10.htm
<p>Hi,</p><p>Today a number of security advisories in third party software are being addressed. Also, a bad dhcp6c patch has been reverted which requires a manual reboot to take full effect.</p><p>CAUTION: The OpenSSH update prevents SSH sessions from being established. You need to restart OpenSSH from the GUI or run the console command "pluginctl -s openssh restart" or reboot the system in order to unbreak it.</p><p>Here are the full patch notes:</p><p><ul><li>interfaces: improve DHCPv6 requirement rules on WAN interface</li><li>interfaces: support reading more attributes in ifconfig output parser</li><li>interfaces: correct logic of resolve flag in ARP table (contributed by Kevin Pelzel)</li><li>reporting: add NetFlow IPv6 support for destinations</li><li>kea-dhcp: add description field to subnets</li><li>kea-dhcp: add next-server option to subnets (contributed by Harm Kroon)</li><li>wireguard: fix IP protocol detection for manual gateway</li><li>ui: remove aria-hidden from dialogs (contributed by Jason Fayre)</li><li>ui: properly break out selectpicker options in modals</li><li>plugins: os-bind 1.32[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.1/dns/bind/pkg-descr">1</a>]</li><li>plugins: os-caddy 1.6.0[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.1/www/caddy/pkg-descr">2</a>]</li><li>plugins: os-ddclient 1.22[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.1/dns/ddclient/pkg-descr">3</a>]</li><li>plugins: os-nginx 1.33[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.1/www/nginx/pkg-descr">4</a>]</li><li>plugins: os-theme-cicada 1.36 (contributed by Team Rebellion)</li><li>plugins: os-theme-vicuna 1.46 (contributed by Team Rebellion)</li><li>plugins: os-zabbix-agent 1.14[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.1/net-mgmt/zabbix-agent/pkg-descr">5</a>]</li><li>plugins: os-zabbix-proxy 1.11[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.1/net-mgmt/zabbix-proxy/pkg-descr">6</a>]</li><li>ports: dhcp6c 20240710 reverts faulty Debian patch</li><li>ports: krb5 1.21.3[<a target="_blank" href="https://web.mit.edu/kerberos/krb5-1.21/">7</a>]</li><li>ports: nss 3.101[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_101.html">8</a>]</li><li>ports: openssh 9.8p1[<a target="_blank" href="https://www.openssh.com/txt/release-9.8">9</a>]</li><li>ports: openvpn 2.6.11[<a target="_blank" href="https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn26#Changesin2.6.11">10</a>]</li><li>ports: suricata 7.0.6[<a target="_blank" href="https://suricata.io/2024/06/27/suricata-7-0-6-and-6-0-20-released/">11</a>]</li></ul></p><p>A hotfix release was issued as 24.1.10_1:</p><p><ul><li>interfaces: allow DHCPv6 server answer from a GUA</li></ul></p><p>A hotfix release was issued as 24.1.10_2:</p><p><ul><li>interfaces: allow DHCPv6 multicast as well</li></ul></p><p>A hotfix release was issued as 24.1.10_3:</p><p><ul><li>firewall: fix regression in GeoIP aliases selector</li></ul></p><p>A hotfix release was issued as 24.1.10_8:</p><p><ul><li>firewall: fix one-to-one NAT migration with external address without a subnet set</li><li>firmware: add fingerprint and upgrade hint for 24.7</li><li>firmware: prefer ZFS over UFS in upgrade message</li><li>firmware: remove unneeded Unbound DNS database upgrade script</li><li>firmware: remove stale Squid plugin upgrade script</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell