Current File : //backups/router/usr/local/opnsense/changelog/24.7.8.htm
<p>Hey there,</p><p>Minor update with FreeBSD security advisories and a number of stable branch patches for various Intel drivers. Two problems with the RRD rework are herby fixed as well.</p><p>Here are the full patch notes:</p><p><ul><li>system: add missing MinProtocol in OpenSSL config template from trust settings</li><li>system: add SignatureAlgorithms option and fix minor form glitch in trust settings</li><li>system: bring CRLs into bundles as well</li><li>system: sync certctl to FreeBSD 14.1 base code et al</li><li>reporting: isset() vs. empty() on RRD enable</li><li>reporting: fix regression in RRD temperature readings</li><li>interfaces: parse part of SFP module information in legacy_interfaces_details()</li><li>firewall: add a note about stateless TCP during syncookie use</li><li>firewall: enhance validation that group name can not start or end with a digit</li><li>firmware: improve health script and use config.sh</li><li>firmware: rework CRL check in config.sh</li><li>firmware: use the trust store for CRL verification</li><li>lang: update available translations</li><li>ipsec: add swanctl.conf download button to settings page</li><li>ipsec: add description field to pre-shared-keys</li><li>isc-dhcp: safeguard output type for json_decode() in leases page</li><li>unbound: allow RFC 2181 compatible names in overrides</li><li>mvc: fix UpdateOnlyTextField incompatibility with DependConstraint (contributed by kumy)</li><li>plugins: os-bind 1.33[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/dns/bind/pkg-descr">1</a>]</li><li>plugins: os-caddy 1.7.4[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/24.7/www/caddy/pkg-descr">2</a>]</li><li>plugins: os-etpro-telemetry lowers log level of collection invoke (contributed by doktornotor)</li><li>plugins: os-iperf fixes JS TypeError when parsing result (contributed by Leo Huang)</li><li>plugins: os-tinc removes "pipes" Python module dependency (contributed by andrewhotlab)</li><li>src: multiple issues in the bhyve hypervisor[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-24:17.bhyve.asc">3</a>]</li><li>src: unbounded allocation in ctl(4) CAM Target Layer[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-24:18.ctl.asc">4</a>]</li><li>src: XDG runtime directory file descriptor leak at login[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-24:17.pam_xdg.asc">5</a>]</li><li>src: assorted FreeBSD stable patches for Intel ixgbe, igb, igc and e1000 drivers</li><li>src: cxgb: register ifmedia callbacks before ether_ifattach</li><li>src: enc: use new KPI to create enc interface</li><li>src: ifconfig: fix wrong indentation for the status of pfsync</li><li>src: iflib: simplify iflib_legacy_setup</li><li>src: iflib: use if_alloc_dev() to allocate the ifnet</li><li>src: netmap: make memory pools NUMA-aware</li><li>src: vlan: handle VID conflicts</li><li>ports: libpfctl 0.14</li><li>ports: nss 3.106[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_106.html">6</a>]</li><li>ports: php 8.2.25[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.2.25">7</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell