Menü Schließen

OPNsense 24.7.8 Security und Bugfix Release

OPNsense Logo

Vor wenigen Tagen wurde die OPNsense Community Edition aktualisiert. Das Update behbt einige Fehler u.a. in verschiedenen Treibern von Intel und schließt Sicherheitslücken in der Firewall. Ein weiterer Fix sind Probleme mit dem RRD.

OPNsense 24.7.8 Release Notes

  • system: add missing MinProtocol in OpenSSL config template from trust settings
  • system: add SignatureAlgorithms option and fix minor form glitch in trust settings
  • system: bring CRLs into bundles as well
  • system: sync certctl to FreeBSD 14.1 base code et al
  • reporting: isset() vs. empty() on RRD enable
  • reporting: fix regression in RRD temperature readings
  • interfaces: parse part of SFP module information in legacy_interfaces_details()
  • firewall: add a note about stateless TCP during syncookie use
  • firewall: enhance validation that group name can not start or end with a digit
  • firmware: improve health script and use config.sh
  • firmware: rework CRL check in config.sh
  • firmware: use the trust store for CRL verification
  • lang: update available translations
  • ipsec: add swanctl.conf download button to settings page
  • ipsec: add description field to pre-shared-keys
  • isc-dhcp: safeguard output type for json_decode() in leases page
  • unbound: allow RFC 2181 compatible names in overrides
  • mvc: fix UpdateOnlyTextField incompatibility with DependConstraint (contributed by kumy)
  • plugins: os-bind 1.33[1]
  • plugins: os-caddy 1.7.4[2]
  • plugins: os-etpro-telemetry lowers log level of collection invoke (contributed by doktornotor)
  • plugins: os-iperf fixes JS TypeError when parsing result (contributed by Leo Huang)
  • plugins: os-tinc removes „pipes“ Python module dependency (contributed by andrewhotlab)
  • src: multiple issues in the bhyve hypervisor[3]
  • src: unbounded allocation in ctl(4) CAM Target Layer[4]
  • src: XDG runtime directory file descriptor leak at login[5]
  • src: assorted FreeBSD stable patches for Intel ixgbe, igb, igc and e1000 drivers
  • src: cxgb: register ifmedia callbacks before ether_ifattach
  • src: enc: use new KPI to create enc interface
  • src: ifconfig: fix wrong indentation for the status of pfsync
  • src: iflib: simplify iflib_legacy_setup
  • src: iflib: use if_alloc_dev() to allocate the ifnet
  • src: netmap: make memory pools NUMA-aware
  • src: vlan: handle VID conflicts
  • ports: libpfctl 0.14
  • ports: nss 3.106[6]
  • ports: php 8.2.25[7]

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert