Current File : //proc/self/root/backups/router/usr/local/opnsense/changelog/20.1.4.htm
<p>Hello everyone,</p><p>It almost looks like business as usual. But we all know it is not. We will get through this together.</p><p>Here are the full patch notes:</p><p><ul><li>system: add missing strtolower() in LDAP sync response</li><li>system: fix /var/run/legacy_log socket creation race with Syslog-ng</li><li>system: add info button to display privilege / ACL endpoints</li><li>system: make IPsec tap tunables overwriteable</li><li>firewall: floating means either all interfaces or more than one selected</li><li>firewall: simplify group maintenance by only applying them on filter reload</li><li>interfaces: use primary IPv6 and support VIP tracking</li><li>interfaces: multiple changes in radvd.conf setup (contributed by maurice-w)</li><li>dhcp: fix DDNS support in DHCPv6 (contributed by Wagner Sartori Junior)</li><li>firmware: mirror opnsense.ieji.de renamed to opn.sense.nz</li><li>openvpn: improve openvpn_port_used() logic</li><li>unbound: minor cleanup in /api/unbound/diagnostics/stats endpoint</li><li>unbound: remove 192.0.0.0/24 from rebinding prevention list (contributed by maurice-w)</li><li>mvc: simplify reload of captive portal, cron, IDS, alias, loopback, VXLAN, web proxy, routes, syslog and shaper</li><li>mvc: limit dropdown size to 10 if not specified</li><li>mvc: support inheritance of the ArrayField type</li><li>mvc: synchronize backup timestamps with revisions</li><li>mvc: fixed width for timestamp column in logging</li><li>mvc: init errorMessage to prevent crash reports</li><li>shell: use interfaces_primary_address6() for correct IPv6 display</li><li>shell: append a newline in pluginctl -g mode</li><li>plugins: os-acme-client 1.30[<a target="_blank" href="https://github.com/opnsense/plugins/pull/1753">1</a>]</li><li>plugins: os-bind 1.13[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/dns/bind/pkg-descr">2</a>]</li><li>plugins: os-freeradius 1.9.6[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/net/freeradius/pkg-descr">3</a>]</li><li>plugins: os-haproxy 2.21[<a target="_blank" href="https://github.com/opnsense/plugins/pull/1755">4</a>]</li><li>plugins: os-maltrail 1.5[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/security/maltrail/pkg-descr">5</a>]</li><li>plugins: os-nginx 1.19[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/www/nginx/pkg-descr">6</a>]</li><li>plugins: os-nut 1.7[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/sysutils/nut/pkg-descr">7</a>]</li><li>plugins: os-postfix 1.14[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/mail/postfix/pkg-descr">8</a>]</li><li>plugins: os-tayga 1.0 (contributed by Michael Muenz)</li><li>plugins: os-telegraf 1.7.7[<a target="_blank" href="https://github.com/opnsense/plugins/blob/master/net-mgmt/telegraf/pkg-descr">9</a>]</li><li>plugins: os-unbound-plus 1.0 (contributed by Michael Muenz and Petr Kejval)</li><li>lang: multiple updates to supported languages</li><li>lang: new Turkish translation (contributed by Aydin Yakar)</li><li>src: work around PCI devices which return all zeros for reads of existing MSI-X table VCTRL registers</li><li>src: fix incorrect checksum calculations with IPv6 extension headers[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-20:06.ipv6.asc">10</a>]</li><li>src: fix TCP IPv6 SYN cache kernel information disclosure[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:04.tcp.asc">11</a>]</li><li>src: fix insufficient oce(4) ioctl(2) privilege checking[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:05.if_oce_ioctl.asc">12</a>]</li><li>src: fix incorrect user-controlled pointer use in epair[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:07.epair.asc">13</a>]</li><li>src: fix kernel memory disclosure with nested jails[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:08.jail.asc">14</a>]</li><li>ports: curl 7.69.1[<a target="_blank" href="https://curl.se/changes.html#7_69_1">15</a>]</li><li>ports: krb5 1.18[<a target="_blank" href="https://web.mit.edu/kerberos/krb5-1.18/">16</a>]</li><li>ports: openssh 8.2p1[<a target="_blank" href="https://www.openssh.com/txt/release-8.2">17</a>]</li><li>ports: openssl 1.1.1f[<a target="_blank" href="https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md">18</a>]</li><li>ports: perl 5.30.2[<a target="_blank" href="https://perldoc.perl.org/5.30.2/perldelta">19</a>]</li><li>ports: php 7.2.29[<a target="_blank" href="https://www.php.net/ChangeLog-7.php#7.2.29">20</a>]</li><li>ports: python 3.7.7[<a target="_blank" href="https://docs.python.org/release/3.7.7/whatsnew/changelog.html">21</a>]</li><li>ports: strongswan 5.8.3[<a target="_blank" href="https://wiki.strongswan.org/versions/76">22</a>]</li><li>ports: sudo 1.8.31p1[<a target="_blank" href="https://www.sudo.ws/legacy.html#1.8.31p1">23</a>]</li></ul></p><p><br>Stay safe and healthy,<br> Your OPNsense team</p>
Mini Shell