Current File : //backups/router/usr/local/opnsense/changelog/24.7.2.htm
<p>Howdy,</p><p>Today a follow-up for the FreeBSD security advisory for pf/ICMP ships that addresses the undesired traceroute behaviour. A few dashboard improvements are included as well as better IPv6 recovery for dhcp6c and assorted stability fixes.</p><p>As a special note we now have native CPU microcode update plugins for either AMD or Intel to install from the GUI. Apart from a reboot these plugins require no further user interaction and will keep the applicable microcode at the latest known version as shipped in the packages repository.</p><p>We are currently working on making PPP capable of running in IPv6-only deployments; additionally ZFS snapshots (a.k.a boot environments) are coming to the next stable release and can already be previewed in the bundled development version.</p><p>Last but not least, an "importmap" free dashboard version is also ready for testing in the development release. We hereby ask for feedback so that it can be included in a subsequent stable release.</p><p>Here are the full patch notes:</p><p><ul><li>system: CRL import ignored text input and triggered unrelated validations</li><li>system: improve the locking during web GUI restart</li><li>system: improve WireGuard and IPsec widgets</li><li>system: add CPU widget graph selection</li><li>system: reformat traffic graphs to bps</li><li>system: add gateway widget item selection</li><li>system: add table view to interface statistics widget on expansion</li><li>system: improve widget error recovery</li><li>system: fix wrong variable assignment in system log search backend</li><li>system: add missing delAction() for proper CRL removal</li><li>interfaces: require PPP interface to be in up state (contributed by Nicolai Scheer)</li><li>interfaces: lock down PPP modes when editing interfaces</li><li>interfaces: backport required interface_ppps_capable()</li><li>interfaces: retire interfaces_bring_up()</li><li>reporting: start using cron for RRD collection</li><li>firmware: remove inactive mirrors from the list</li><li>firmware: introduce sanity checks prior to upgrades</li><li>firmware: cleanup package manager temporary files prior to upgrades</li><li>kea-dhcp: fix privileges for page ACL</li><li>ipsec: advanced settings MVC/API conversion</li><li>ipsec: add retransmission settings in charon section in advanced settings</li><li>openvpn: unhide server fields for DCO instances</li><li>mvc: remove setJsonContent() and make sure Response->send() handles array types properly</li><li>mvc: FileObject write() should sync by default</li><li>rc: export default ZPOOL_IMPORT_PATH</li><li>ui: sidebar submenu expand fix (contributed by Team Rebellion)</li><li>plugins: os-caddy 1.6.3[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/www/caddy/pkg-descr">1</a>]</li><li>plugins: os-cpu-microcode-amd 1.0</li><li>plugins: os-cpu-microcode-intel 1.0</li><li>plugins: os-freeradius 1.9.25[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/freeradius/pkg-descr">2</a>]</li><li>plugins: os-intrusion-detection-content-snort-vrt 1.2 switch to newer ruleset snapshot (contributed by Jim McKibben)</li><li>plugins: os-theme-tukan 1.28 (contributed by Dr. Uwe Meyer-Gruhl)</li><li>src: axgbe: implement ifdi_i2c_req for diagnostics information</li><li>src: if_clone: allow maxunit to be zero</li><li>src: if_pflog: limit the maximum unit via the new KPI</li><li>src: pf: invert direction for inner icmp state lookups</li><li>src: pf: fix icmp-in-icmp state lookup</li><li>src: pf: vnet-ify pf_hashsize, pf_hashmask, pf_srchashsize and V_pf_srchashmask</li><li>ports: dhcp6c 20240820 fixes two renewal edge cases</li><li>ports: nss 3.103[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_103.html">3</a>]</li><li>ports: phpseclib 3.0.41[<a target="_blank" href="https://github.com/phpseclib/phpseclib/releases/tag/3.0.41">4</a>]</li><li>ports: unbound 1.21.0[<a target="_blank" href="https://nlnetlabs.nl/projects/unbound/download/#unbound-1-21-0">5</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell