Current File : //proc/self/root/backups/router/usr/local/opnsense/changelog/20.7.8.htm
<p>Hi there,</p><p>The particular volume of this stable update foreshadows the end of the 20.7 series in less than two weeks.</p><p>One longstanding issue with radvd on FreeBSD 12.1 has been resolved according to multiple user feedback.</p><p>The mailing lists have been archived and will no longer be used.</p><p>And before there are questions: yes, consumers of the development version are now able to upgrade to 21.1-RC1.</p><p>Here are the full patch notes:</p><p><ul><li>system: allow to recover from bad TLS certificate and/or bad settings in console interface assign</li><li>system: display destination port number in firewall log widget (contributed by Team Rebellion)</li><li>system: keep compatible TLS 1 defaults for web GUI on 20.7 series</li><li>system: set default certificate lifetime to 397 days</li><li>firewall: add type 128 to outgoing IPv6 RFC4890 requirements</li><li>firewall: add manual refresh button to live log</li><li>firewall: fix typo in ICMPv6 validation</li><li>firewall: fix minor regression in maintaining target alias file</li><li>firewall: fix all state value in pfTop (contributed by Lucas Held)</li><li>firewall: remove duplicated destination field in live log</li><li>firewall: add read-only actions to aliases permission (contributed by Manuel Faux)</li><li>firewall: category selector missing caption</li><li>reporting: add top talkers to revamped traffic graph page</li><li>reporting: fix name resolution filter change in insight</li><li>reporting: persist interface selection on traffic graph page</li><li>captive portal: disable faulty TLS on HTTP since lighttpd 1.4.56</li><li>dhcp: fix sorting of IPv6 static mappings (contributed by vnxme)</li><li>dhcp: fix incorrect parsing of DUID (contributed by Matt Holgate)</li><li>firmware: opnsense-code now updates the current directory if nothing was specified</li><li>firmware: opnsense-code now uses flexible make.conf target from tools.git</li><li>firmware: opnsense-update now supports snapshot access via -z option</li><li>firmware: opnsense-update now fixes missing dependencies on the fly</li><li>firmware: fix some issues with missing repository on server</li><li>firmware: add version output and date to audit logs</li><li>ipsec: display remote host in status overview (contributed by garlic17)</li><li>opendns: add standalone mode</li><li>openssh: honour MAX_LISTEN_SOCKS</li><li>openvpn: set default certificate lifetime to 397 days in wizard</li><li>unbound: generate all configuration files in service controller</li><li>unbound: fix broken lines in large files (contributed by kulikov-a)</li><li>web proxy: lock ACL download to prevent duplicate execution</li><li>mvc: allow underscore in filter string (contributed by kulikov-a)</li><li>plugins: os-haproxy 2.26[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/20.7/net/haproxy/pkg-descr">1</a>]</li><li>plugins: os-hw-probe 1.0 (contributed by Michael Muenz)</li><li>plugins: os-maltrail fixes sensor start without server (contributed by Julio Camargo)</li><li>plugins: os-nginx 1.20[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/20.7/www/nginx/pkg-descr">2</a>]</li><li>plugins: os-tinc fixes for latest version (contributed by vnxme)</li><li>src: fix OpenSSL NULL pointer de-reference[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-20:33.openssl.asc">3</a>]</li><li>src: fix partial scrub of multicast packages</li><li>src: free full mbuf chains in iflib when draining transmit queues</li><li>src: initialize oifp to avoid bogus results/panics in edge cases</li><li>src: 10Gigabit Ethernet driver for AMD SoC</li><li>ports: libressl 3.2.3[<a target="_blank" href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.2-relnotes.txt">4</a>][<a target="_blank" href="https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.3-relnotes.txt">5</a>]</li><li>ports: nss 3.60.1</li><li>ports: php 7.3.26[<a target="_blank" href="https://www.php.net/ChangeLog-7.php#7.3.26">6</a>]</li><li>ports: pkg fix for shell keyword by opening root file descriptor</li><li>ports: radvd 2.19[<a target="_blank" href="https://radvd.litech.org/">7</a>]</li><li>ports: sudo 1.9.5p1[<a target="_blank" href="https://www.sudo.ws/stable.html#1.9.5p1">8</a>]</li></ul></p><p>A hotfix release was issued as 20.7.8_4:</p><p><ul><li>firmware: enable upgrade path to 21.1</li><li>ports: sudo 1.9.5p2[<a target="_blank" href="https://www.sudo.ws/stable.html#1.9.5p2">9</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell