Current File : //proc/self/root/backups/router/usr/local/opnsense/changelog/20.7.2.htm
<p>Dear all,</p><p>While we are still looking closer at netmap/iflib performance on 12.1 we are rolling out a kernel with Intel em/igb updates that should avoid bad packet counts in the default installation. Syslog-ng received a workaround for the diagnosed startup issue and alias now supports MAC address content similar to how host content works.</p><p>Here are the full patch notes:</p><p><ul><li>system: set REQUESTS_CA_BUNDLE in environments</li><li>system: improve parsing for temperature sensors</li><li>system: add "new-password" hint for Chrome on login form</li><li>system: rename syslog services description and hide legacy mode when not enabled</li><li>system: force syslog-ng restart after boot sequence</li><li>system: properly read new style logging directories</li><li>reporting: replace line endings when sending traceback to syslog in flowd_aggregate</li><li>reporting: add traffic graph filter for private IPv4 networks (contributed by kcaj-burr)</li><li>firewall: add MAC address alias type</li><li>firewall: be more verbose when fetching alias remote content</li><li>firewall: prevent pfctl error messages from being suppressed</li><li>firewall: exclude all reserved pf.conf keywords from alias name</li><li>firewall: bogons not loaded on initial load</li><li>firewall: reset damaged bogons files on startup</li><li>interfaces: add listen-queue-sizes in socket diagnostics</li><li>firmware: properly report an unsigned repository</li><li>firmware: revoke 20.1 fingerprint</li><li>intrusion detection: rule cache parse error on invalid metadata</li><li>intrusion detection: allow search for status enabled/disabled</li><li>web proxy: correct template replacement during build time</li><li>web proxy: bugfix in JSON access log</li><li>unbound: updated project block lists links (contributed by gap579137)</li><li>backend: add regex_replace template support</li><li>plugins: os-acme-client 1.36[<a target="_blank" href="https://github.com/opnsense/plugins/pull/1974">1</a>]</li><li>plugins: os-dyndns 1.23 adds Gandi LiveDNS support (contributed by vizion8-dan)</li><li>plugins: os-haproxy 2.24[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/20.7/net/haproxy/pkg-descr">2</a>]</li><li>plugins: os-stunnel 1.0.1 includes performance tweaks</li><li>plugins: os-telegraf 1.8.2[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/20.7/net-mgmt/telegraf/pkg-descr">3</a>]</li><li>plugins: os-tinc fixes cipher parsing on 20.7</li><li>src: remove ACPI workaround for serial console on AMD EPYC</li><li>src: Make pf.conf ":0" ignore link-local v6 addresses too</li><li>src: default "show bad packets" tunable to off in e100 driver</li><li>src: fix unsolicited promisc mode in e1000 driver</li><li>src: add valectl to the system commands</li><li>ports: ca_root_nss/nss 3.56[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_56.html">4</a>]</li><li>ports: curl 7.72.0[<a target="_blank" href="https://curl.se/changes.html#7_72_0">5</a>]</li><li>ports: libressl 3.1.4[<a target="_blank" href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.1.4-relnotes.txt">6</a>]</li><li>ports: openldap 2.4.51[<a target="_blank" href="https://www.openldap.org/software/release/changes.html">7</a>]</li><li>ports: php 7.3.21[<a target="_blank" href="https://www.php.net/ChangeLog-7.php#7.3.21">8</a>]</li><li>ports: python 3.7.9[<a target="_blank" href="https://docs.python.org/release/3.7.9/whatsnew/changelog.html">9</a>]</li><li>ports: sqlite 3.33.0[<a target="_blank" href="https://sqlite.org/releaselog/3_33_0.html">10</a>]</li><li>ports: squid 4.13[<a target="_blank" href="http://www.squid-cache.org/Versions/v4/squid-4.13-RELEASENOTES.html">11</a>]</li><li>ports: syslog-ng dlsym() workaround</li><li>ports: unbound 1.11.0[<a target="_blank" href="https://nlnetlabs.nl/projects/unbound/download/#unbound-1-11-0">12</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell