Current File : //proc/self/root/backups/router/usr/local/opnsense/changelog/22.7.9.htm
<p>Hi!</p><p>A quick update to address the new FreeBSD security advisory for ping utility as well as Suricata. The DNS block list was rewritten in Python and there will be a couple of cool additions for it in the foreseeable future. :)</p><p>Here are the full patch notes:</p><p><ul><li>system: fix internal CRL check (contributed by kulikov-a)</li><li>system: fix a few minor Coverity Scan reports in PHP code[<a target="_blank" href="https://scan.coverity.com/projects/opnsense-core">1</a>]</li><li>interfaces: use get_interface_list() to identify hardware devices</li><li>interfaces: fix single ACL use for MVC/API interface pages</li><li>firewall: add category selection to aliases</li><li>unbound: rework DNSBL implementation to Python module</li><li>backend: clean up scripts/systemheath location</li><li>backend: moved log format definitions to new location for core and several plugins</li><li>mvc: change default sorting to case-insensitive</li><li>mvc: move JavaScript and CSS imports to base controller</li><li>mvc: make sure HostnameField with ZoneRootAllowed accepts "@." prefix</li><li>plugins: os-telegraf 1.12.7[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/22.7/net-mgmt/telegraf/pkg-descr">2</a>]</li><li>plugins: os-theme-cicada 1.30 (contributed by Team Rebellion)</li><li>plugins: os-theme-vicuna 1.42 (contributed by Team Rebellion)</li><li>plugins: os-wireguard now attempts to start tunnels again when all DNS is configured</li><li>src: ixgbe: workaround errata about UDP frames with zero checksum</li><li>src: hpet: Allow a MMIO window smaller than 1K</li><li>src: ping: fix handling of IP packet sizes[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.asc">3</a>]</li><li>ports: php 8.0.26[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.0.26">4</a>]</li><li>ports: sqlite 3.40.0[<a target="_blank" href="https://sqlite.org/releaselog/3_40_0.html">5</a>]</li><li>ports: suricata 6.0.9[<a target="_blank" href="https://suricata.io/2022/11/29/suricata-6-0-9-released/">6</a>]</li></ul></p><p>A hotfix release was issued as 22.7.9_3:</p><p><ul><li>unbound: fix blocklist use with DNS64 mode (contributed by kulikov-a)</li><li>unbound: change working directory before checking configuration</li><li>web proxy: fix broken "Google GSuite restricted" option</li><li>ports: suricata backs out new version 14 netmap API changes for now[<a target="_blank" href="https://redmine.openinfosecfoundation.org/issues/5744">7</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell