Current File : //proc/self/root/backups/router/usr/local/opnsense/changelog/20.7.4.htm
<p>Good evening everyone,</p><p>This release finally wraps up the recent Netmap kernel changes and tests. The Realtek vendor driver was updated as well as third party software cURL, libxml, OpenSSL, PHP, Suricata, Syslog-ng and Unbound just to name a couple of them.</p><p>We would like to thank Sunny Valley Networks for their relentless efforts to bring said Netmap fixes and improvements into FreeBSD.</p><p>If you are having trouble with a stuck update try the command sequence below from the root shell or simply reboot from the GUI and rerun the update in case it was not fully carried out yet.</p><p><pre>pkill syslog-ng
service syslog-ng restart</pre></p><p>Here are the full patch notes:</p><p><ul><li>system: switch web GUI address selection to avoid server.bind in IPv6 first case</li><li>system: fix defunct "use default" button on web GUI listen interfaces</li><li>system: signal "auth user changed" when a user is modified via web GUI</li><li>system: replace gateway widget and add proper API endpoint for it</li><li>system: fix reading displayName attribute on LDAP search (contributed by ServiusHack)</li><li>interfaces: change maximum MTU value to 65535 in accordance with RFC 791</li><li>interfaces: update wireless device detection prefixes</li><li>interfaces: lexical sort interface keys for assignments</li><li>firewall: add support for network exclusions in network alias type</li><li>firewall: add NAT information to pfInfo page (contributed by kulikov-a)</li><li>firewall: associated NAT rules missed state keyword</li><li>firewall: allow "or" conditions in live log</li><li>firewall: use pfctl for alias IP check (contributed by kulikov-a)</li><li>dnsmasq: regenerate resolv.conf on save</li><li>dnsmasq: log queries option</li><li>intrusion detection: ignore pkill exit status when performing update</li><li>ipsec: add description to reconfigure action (contributed by Frank Wall)</li><li>unbound: rebuild unbound blacklist download</li><li>unbound: restructure reconfigure so that we always flush config</li><li>backend: add new "config changed" event using syshook structure (sponsored by Modirum)</li><li>mvc: add a few missing control widgets from log pages</li><li>ui: upgrade moment.js to 2.27.0</li><li>plugins: os-freeradius 1.9.8[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/20.7/net/freeradius/pkg-descr">1</a>]</li><li>plugins: os-git-backup 1.0[<a target="_blank" href="https://github.com/opnsense/plugins/issues/2049">2</a>] (sponsored by Modirum)</li><li>plugins: os-haproxy 2.25[<a target="_blank" href="https://curl.se/changes.html#7_73_0">3</a>]</li><li>plugins: os-stunnel 1.0.2 adds service protocol selector (contributed by fhloston)</li><li>src: extended netmap update and driver fixes</li><li>src: netmap tun and lagg support (contributed by Sunny Valley Networks)</li><li>src: update Realtek re driver to upstream version 1.96.04 (contributed by Laurent Dinclaux)</li><li>ports: curl 7.73.0[<a target="_blank" href="https://curl.se/changes.html#7_73_0">3</a>]</li><li>ports: libxml fixes for CVE-2019-20388, CVE-2020-7595 and CVE-2020-24977</li><li>ports: nss 3.58[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_58.html">4</a>]</li><li>ports: openssl 1.1.1h[<a target="_blank" href="https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md">5</a>]</li><li>ports: php 7.3.23[<a target="_blank" href="https://www.php.net/ChangeLog-7.php#7.3.23">6</a>]</li><li>ports: pkg 1.15.10</li><li>ports: radvd patch for dynamic interface shifting index</li><li>ports: sudo 1.9.3p1[<a target="_blank" href="https://www.sudo.ws/stable.html#1.9.3p1">7</a>]</li><li>ports: suricata 5.0.4[<a target="_blank" href="https://suricata-ids.org/2020/10/08/suricata-4-1-9-and-5-0-4-released/">8</a>]</li><li>ports: syslog-ng 3.29.1[<a target="_blank" href="https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.29.1">9</a>]</li><li>ports: unbound 1.12.0[<a target="_blank" href="https://nlnetlabs.nl/projects/unbound/download/#unbound-1-12-0">10</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell