OPNsense 24.1.5 Bugfix und 24.1.5_2 Hotfix Release

Die Open-Source Firewall OPNsense wurde aktualisiert und die Community Edition liegt nun in Version 24.1.5 bzw. 24.1.5_2 als Hotfix Release vor. Das Update behebt bringt ein paar Kernelupdates und korrigiert Fehler. Das Update beinhaltet das Hotfixe 24.1.5_1, da bei der Qualitätskontrolle ein Fehler in der gettext library gefunden wurde.

OPNsense 24.1.5 Release Notes

• system: fix PHP warnings and spurious validation in route model
• system: fix translation of static PHP pages with newer gettext
• interfaces: support a primary interface in LAGG failover mode
• interfaces: stop caching IPv6 address to decide if reload is required
• firmware: opnsense-revert: fix issue with downloaded package install
• ipsec: fix typo in config generation for AH proposals
• unbound: duckduckgo.com blocklist fix
• wireguard: add a peer configuration generator with QR code capability
• wireguard: improve overall configuration UX
• mvc: add „safe“ filter in Phalcon volt templates
• mvc: feed current language into view to replace hardcoded „en-US“
• mvc: fix minor regression with „allownew“ not having a default
• mvc: extend model implementation to support volatile fields
• mvc: add setBaseHook() to ApiMutableModelControllerBase
• rc: fix wrong order in service startup (contributed by Frank Wall)
• ui: move cache_safe() functions to appropriate include
• ui: add a „statusled“ formatter to bootgrid
• ui: add a „grid-reload“ helper to SimpleActionButton
• plugins: os-bind 1.21[1]
• plugins: os-caddy 1.5.3[2]
• src: wg: fix handling of errors in wg_transmit()
• src: wg: use proper barriers around pkt->p_state
• src: kern: fix panic with disabled ttys
• src: opencrypto: advance the correct pointer in crypto_cursor_copydata()
• src: opencrypto: handle end-of-cursor conditions in crypto_cursor_segment()
• src: opencrypto: respect alignment constraints in xor_and_encrypt()
• src: ccr,ccp: fix argument order to sglist_append_vmpages
• src: ossl: add missing labels to bsaes-armv7.S
• src: ipsec esp: avoid dereferencing freed secasindex
• src: irdma: upgrade to 1.2.36-k
• src: irdma: remove artificial completion generator
• src: tcp: cubic – restart epoch after RTO
• src: tcp: prevent div by zero in cc_htcp
• src: net80211: adjust more VHT structures/fields
• ports: curl 8.7.1[3]
• ports: expat 2.6.2[4]
• ports: libucl 0.9.1
• ports: lighttpd 1.4.75[5]
• ports: nss 3.99[6]
• ports: openssh-portable 9.7p1[7]
• ports: openvpn 2.6.10[8]
• ports: php 8.2.17[9]
• ports: py-duckdb 0.10.1[10]
• ports: py-netaddr 1.2.1[11]

OPNsense Hotfix 24.1.5_2 Release Notes

• wireguard: store attached instance during peer generation