Current File : //backups/router/usr/local/opnsense/changelog/24.7.12.htm
<p>Howdy!</p><p>One last stable update before the switch to the 25.1 series. Security-wise it has bee rather quiet over the past few weeks. A new kernel is included with a number of smaller reliability fixes and amendments.</p><p>The 25.1-RC1 images follow next week based on a full build using FreeBSD 14.2. Thanks all for testing the beta version so far! The release date for the final 25.1 version is January 29.</p><p>Here are the full patch notes:</p><p><ul><li>system: re-enable support for subjectAltName when creating CSRs</li><li>system: remove spurious backup() during config revert</li><li>reporting: add daemon -f parameter to close file descriptors for NetFlow local capture (contributed by Ben Smithurst)</li><li>firmware: use output_cmd/output_txt helpers in remaining scripts</li><li>ipsec: fix mobile clients reload missing system.inc</li><li>isc-dhcp: IPv6 prefixes script can fail to restart (contributed by Ben Smithurst)</li><li>kea-dhcp: align hostname validation with manual host entries</li><li>mvc: add serialNumber and issuer in Store::parseX509()</li><li>mvc: restore support for JSON input data without configd callout in JsonKeyValueStoreField</li><li>ui: add classes to system history diff content so themes can override the defaults</li><li>ui: load CSV as text to prevent encoding issues in SimpleFileUploadDlg()</li><li>plugins: os-acme-client 4.7[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/security/acme-client/pkg-descr">1</a>]</li><li>plugins: os-caddy 1.8.0[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/www/caddy/pkg-descr">2</a>]</li><li>plugins: os-freeradius 1.9.27[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/freeradius/pkg-descr">3</a>]</li><li>plugins: os-haproxy 4.4[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/haproxy/pkg-descr">4</a>]</li><li>plugins: os-mdns-repeater 1.2[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/mdns-repeater/pkg-descr">5</a>]</li><li>plugins: os-squid 1.1[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/www/squid/pkg-descr">6</a>]</li><li>plugins: os-tailscale 1.1[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/security/tailscale/pkg-descr">7</a>]</li><li>plugins: os-theme-rebellion 1.9.2 (contributed by Team Rebellion)</li><li>src: if_ovpn: improve reconnect handling</li><li>src: iflib: set the NUMA domain in receive packet headers</li><li>src: ip: defer checks for an unspecified dstaddr until after pfil hooks</li><li>src: ice_ddp: update to 1.3.41.0</li><li>ports: curl 8.11.1[<a target="_blank" href="https://curl.se/changes.html#8_11_1">8</a>]</li><li>ports: libpfctl 0.15</li><li>ports: php 8.2.27[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.2.27">9</a>]</li><li>ports: python 3.11.11[<a target="_blank" href="https://docs.python.org/release/3.11.11/whatsnew/changelog.html">10</a>]</li></ul></p><p>A hotfix release was issued as 24.7.12_2:</p><p><ul><li>plugins: turning binary data into JSON may fail globally</li><li>unbound: fixup permission on copy</li><li>ports: openvpn 2.6.13[<a target="_blank" href="https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn26#Changesin2.6.13">11</a>]</li></ul></p><p>A hotfix release was issued as 24.7.12_4:</p><p><ul><li>firmware: add fingerprint and upgrade hint for 25.1</li><li>firmware: disable duckdb migration for stable transition again</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell