Current File : //backups/router/usr/local/opnsense/changelog/24.7.7.htm
<p>Hello,</p><p>A small update to keep things moving forward while things are quietening down a little bit. Still working on improving the trust store integration and already tackling new MVC/API conversions on the development end.</p><p>Here are the full patch notes:</p><p><ul><li>system: add OpenSSH "RekeyLimit" with a limited set of choices</li><li>system: fix certificate condition in setCRL() (contributed by richierg)</li><li>system: untrusted directory changed in FreeBSD 14</li><li>system: remove obsolete banners from static pages</li><li>system: address CRL/cert subject hash mismatch during trust store rehash</li><li>reporting: refactor existing RRD backend code</li><li>firewall: throttle live logging on dashboard widget</li><li>interfaces: fix VXLAN interface being busy when vxlanlocal or vxlanremote is changed</li><li>interfaces: 6RD/6to4 route creation should be limited to IPv6</li><li>firmware: remove escaped slashes workaround on mirror/flavour write</li><li>firmware: CRL checking for business update mirror</li><li>firmware: introduce config.sh and use it in launcher.sh and connection.sh</li><li>firmware: restart cron on updates</li><li>intrusion detection: reorganise settings page with headers</li><li>intrusion detection: support configuration of eve-log for HTTP and TLS (contributed by Toby Chen)</li><li>ipsec: fix advanced option "max_ikev1_exchanges"</li><li>backend: cache file cleanup when TTL is reached</li><li>backend: correct template helper exists() return type (contributed by kumy)</li><li>mvc: fix config.xml file open mode in overwrite()</li><li>mvc: add missing request->hasQuery()</li><li>mvc: add missing request->getScheme()</li><li>mvc: add missing request->getURI()</li><li>mvc: extend sanity checks in isIPInCIDR()</li><li>ui: fix tree view style targeting elements outside this view</li><li>plugins: enforce defaults on devices</li><li>plugins: os-caddy 1.7.3[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/www/caddy/pkg-descr">1</a>]</li><li>plugins: os-ddclient 1.25[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/dns/ddclient/pkg-descr">2</a>]</li><li>plugins: os-freeradius 1.9.26[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/freeradius/pkg-descr">3</a>]</li><li>plugins: os-frr 1.42[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/frr/pkg-descr">4</a>]</li><li>plugins: os-lldpd 1.2[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net-mgmt/lldpd/pkg-descr">5</a>]</li><li>plugins: os-net-snmp 1.6[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net-mgmt/net-snmp/pkg-descr">6</a>]</li><li>plugins: os-upnp 1.7[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/net/upnp/pkg-descr">7</a>]</li><li>plugins: os-wazuh-agent 1.1[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/security/wazuh-agent/pkg-descr">8</a>]</li><li>ports: monit 5.34.2[<a target="_blank" href="https://mmonit.com/monit/changes/">9</a>]</li><li>ports: nss 3.105[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_105.html">10</a>]</li><li>ports: openssh 9.9.p1[<a target="_blank" href="https://www.openssh.com/txt/release-9.9">11</a>]</li><li>ports: pkg fix for for embedded libfetch when doing CRL verification</li><li>ports: py-duckdb 1.1.2[<a target="_blank" href="https://github.com/duckdb/duckdb/releases/tag/v1.1.2">12</a>]</li><li>ports: syslog-ng 4.8.1[<a target="_blank" href="https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.1">13</a>]</li><li>ports: unbound 1.22.0[<a target="_blank" href="https://nlnetlabs.nl/projects/unbound/download/#unbound-1-22-0">14</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell