opnsense/docs
1
0
Fork 0
mirror of https://github.com/opnsense/docs.git synced 2026-05-04 22:40:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

changelogs

Browse Source
This commit is contained in:
Ad Schellevis
2025-03-11 17:43:16 +01:00
parent bdda445544
commit 8628ba5ae0
15 changed files with 95 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
source/CE_releases.rst
View File

@@ -8,7 +8,7 @@ Community Edition
:width: 600px
:align: center
As of January 2015 there have been *306* releases leading to the latest version *25.1.2*
As of January 2015 there have been *307* releases leading to the latest version *25.1.3*
named "Ultimate Unicorn".

4
source/releases/BE_20.1.rst
View File

@@ -487,7 +487,7 @@ And here are the full patch notes against version 20.1-RC1:
Known issues and limitations:
* HardenedBSD 12.1 has been postponed to the next major release
* Legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* Legacy MPD plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* To prevent stale configuration files for remote syslog we advise to setup the new targets first `[9] <https://docs.opnsense.org/manual/settingsmenu.html#logging-targets>`__ and disable the old ones under System: Settings: Logging
* i386 has not been deprecated for the time being ;)
@@ -587,7 +587,7 @@ Known issues and limitations:
* HardenedBSD 12.1 has been postponed to the next major release
* Nano growfs does not work on this release candidate, but a fix for 20.1 already exists
* Installer still advertises 19.7, but a fix for 20.1 already exists
* Legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* Legacy MPD plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* i386 has not been deprecated for the time being ;)
The public key for the 20.1 series is:

4
source/releases/BE_20.7.rst
View File

@@ -479,7 +479,7 @@ Here are the full patch notes against version 20.7-RC1:
Known issues and limitations:
* legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp are no longer available
* legacy MPD plugins os-l2tp, os-pppoe and os-pptp are no longer available
* i386 architecture builds are no longer available
The public key for the 20.7 series is:
@@ -594,7 +594,7 @@ Here are the full patch notes against 20.1.8_1:
Known issues and limitations:
* Legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp will no longer be available
* Legacy MPD plugins os-l2tp, os-pppoe and os-pptp will no longer be available
* i386 architecture builds will no longer be available
* Installer still advertises 20.1

18
source/releases/BE_21.10.rst
View File

@@ -236,14 +236,14 @@ Here are the full patch notes:
* src: fix kernel panic in vmci driver initialization `[16] <https://www.freebsd.org/security/advisories/FreeBSD-EN-21:28.vmci.asc>`__
* src: timezone database information update `[17] <https://www.freebsd.org/security/advisories/FreeBSD-EN-21:29.tzdata.asc>`__
* ports: dnspython 2.1.0 `[18] <https://dnspython.readthedocs.io/en/stable/whatsnew.html>`__
* ports: jinja 3.0.1 `[19] <https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-1>`__
* ports: lighttpd 1.4.61 `[20] <https://www.lighttpd.net/2021/10/28/1.4.61/>`__
* ports: nss 3.72 `[21] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_72.html>`__
* ports: openssh 8.8p1 `[22] <https://www.openssh.com/txt/release-8.8>`__
* ports: openvpn 2.5.4 `[23] <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25#Changesin2.5.4>`__
* ports: pcre2 10.39 `[24] <https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.39>`__
* ports: php 7.4.25 `[25] <https://www.php.net/ChangeLog-7.php#7.4.25>`__
* ports: phpseclib 2.0.34 `[26] <https://github.com/phpseclib/phpseclib/releases/tag/2.0.34>`__
* ports: lighttpd 1.4.61 `[19] <https://www.lighttpd.net/2021/10/28/1.4.61/>`__
* ports: nss 3.72 `[20] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_72.html>`__
* ports: openssh 8.8p1 `[21] <https://www.openssh.com/txt/release-8.8>`__
* ports: openvpn 2.5.4 `[22] <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25#Changesin2.5.4>`__
* ports: pcre2 10.39 `[23] <https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.39>`__
* ports: php 7.4.25 `[24] <https://www.php.net/ChangeLog-7.php#7.4.25>`__
* ports: phpseclib 2.0.34 `[25] <https://github.com/phpseclib/phpseclib/releases/tag/2.0.34>`__
* ports: py-jinja 3.0.1 `[26] <https://jinja.palletsprojects.com/en/stable/changes/#version-3-0-1>`__
* ports: strongswan 5.9.4 `[27] <https://github.com/strongswan/strongswan/releases/tag/5.9.4>`__
* ports: sudo 1.9.8p2 `[28] <https://www.sudo.ws/stable.html#1.9.8p2>`__
@@ -401,7 +401,7 @@ Here are the full patch notes:
* ports: ifinfo 13.0
* ports: krb5 1.19.2 `[20] <https://web.mit.edu/kerberos/krb5-1.19/>`__
* ports: monit 5.29.0 `[21] <https://mmonit.com/monit/changes/>`__
* ports: mpd5 adds L2TP interoperability fix from upstream
* ports: mpd adds L2TP interoperability fix from upstream
* ports: nettle 3.7.3
* ports: nss 3.70 `[22] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_70.html>`__
* ports: openvpn 2.5.3 `[23] <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25#Changesin2.5.3>`__

2
source/releases/BE_22.4.rst
View File

@@ -307,7 +307,7 @@ Here are the full patch notes:
* interfaces: align GIF configuration with base system options
* interfaces: fix default handling for VIP nobind option
* interfaces: allow VIP nobind feature on CARP addresses
* interfaces: stop mpd5 daemon before starting
* interfaces: stop MPD process before starting
* interfaces: always show interface in GIF and GRE overview even on VIP use
* interfaces: fix GIF and GRE VIP use loading order in IP alias cases
* interfaces: remove device creation side effect from bridge, LAGG, GIF, GRE and VLAN GUI pages

29
source/releases/CE_15.1.rst
View File

@@ -1049,36 +1049,27 @@ At this point, using any of the two methods, you should be on OPNsense
15.1.7-78bdb9aef FreeBSD 10.1-RELEASE-p6.
This is the official change log:
* Fix integer overflow in IGMP protocol `[1] <https://www.freebsd.org/security/advisories/FreeBSD-SA-15:04.igmp.asc>`__
* Fix vt(4) crash with improper ioctl parameters `[2] <https://security.freebsd.org/advisories/FreeBSD-EN-15:01.vt.asc>`__
* Updated base system OpenSSL to 1.0.1l `[3] <https://security.freebsd.org/advisories/FreeBSD-EN-15:02.openssl.asc>`__
* Fix freebsd-update libraries update ordering issue `[4] <https://security.freebsd.org/advisories/FreeBSD-EN-15:03.freebsd-update.asc>`__
* Disabled OpenSSH's High Performance SSH/SCP and None-Cipher extensions to
follow up on several security-related discussions.
* Switched from a heavy Bind installation to a lightweight one to reduce
attack surface.
* Removed and replaced the legacy :code:`check_reload_status` daemon with a
Python-based rewrite.
* Disabled OpenSSH's High Performance SSH/SCP and None-Cipher extensions to follow up on several security-related discussions.
* Switched from a heavy Bind installation to a lightweight one to reduce attack surface.
* Removed and replaced the legacy :code:`check_reload_status` daemon with a Python-based rewrite.
* Fixed the auto-login console lockout regression introduced in 15.1.6.1.
* Fixed a problem associated with OpenVPN not being able to read passwords
from files.
* Notable ports upgrades: bind-tools 9.10.2, strongswan 5.2.2_1, curl 7.41
plus our LibreSSL fixes for mpd4/mpd5/libpdel.
* Fixed a problem associated with OpenVPN not being able to read passwords from files.
* Notable ports upgrades: bind-tools 9.10.2, strongswan 5.2.2_1, curl 7.41 plus our LibreSSL fixes for mpd/libpdel.
* Removed PHP-FPM remnants from IPv6 and OpenVPN scripts.
* Fixed several OpenSSL invokes to use the latest port version as opposed
to the base version.
* Fixed several OpenSSL invokes to use the latest port version as opposed to the base version.
* Improved memory/disc/swap usage on the dashboard.
* Properly set DNS Resolver Advanced defaults.
* Fixed append of custom Unbound scrips.
* Modified the root menu shell to pass through to a real shell when arguments
are given.
* Modified the root menu shell to pass through to a real shell when arguments are given.
* Zapped the spurious "Array" prefix in user-defined aliases.
* Moved the bogons files fetch location to a local mirror.
* The core.git development boot hook has been improved to properly include
/usr/local/etc/rc changes.
* All of our packages are now annotated as coming from our mirror as well as
additional safeguards potentially allowing you to use additional FreeBSD
packages on top of OPNsense.
* The core.git development boot hook has been improved to properly include /usr/local/etc/rc changes.
* All of our packages are now annotated as coming from our mirror as well as additional safeguards potentially allowing you to use additional FreeBSD packages on top of OPNsense.
--------------------------------------------------------------------------

2
source/releases/CE_16.1.rst
View File

@@ -492,7 +492,7 @@ And this is the change log for 16.7 BETA:
NetFlow data
* interfaces: polling mode has been deprecated and will be phased
out soon
* vpn: L2TP, PPTP and PPPoE servers have been ported to use MPD5
* vpn: L2TP, PPTP and PPPoE servers have been ported to use MPD version 5
* vpn: legacy servers have been prepared to be moved from base
install to plugins
* cron: code preparations for opening up the MVC cron API

4
source/releases/CE_16.7.rst
View File

@@ -181,7 +181,7 @@ Here is the full list of changes:
* openvpn: add reneg-sec option to client exports
* dnsmasq: fix 16.7.10 regression in host file handling
* web proxy: make backend config plugin-friendly
* plugins: fix a potential error in MPD5 plugins (contributed by Evgeny Bevz)
* plugins: fix a potential error in MPD plugins (contributed by Evgeny Bevz)
* src: fix possible login(1) argument injection in telnetd(8) `[2] <https://www.freebsd.org/security/advisories/FreeBSD-SA-16:36.telnetd.asc>`__
* src: fix link_ntoa(3) buffer overflow in libc `[3] <https://www.freebsd.org/security/advisories/FreeBSD-SA-16:37.libc.asc>`__
* src: fix possible escape from bhyve(8) virtual machine `[4] <https://www.freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc>`__
@@ -925,7 +925,7 @@ Here is our list of major features that were worked on since 16.1:
* Russian translations 100% completed
* NetFlow export to multiple remote destinations
* NetFlow local reporting frontend
* PPTP, L2TP and PPPoE Servers ported to MPD5
* PPTP, L2TP and PPPoE Servers ported to MPD version 5
* HAProxy plugin
* Traffic shaping with CoDel / FQ-CoDel
* Firewall alias geolocation support

2
source/releases/CE_17.7.rst
View File

@@ -210,7 +210,7 @@ Here are the full patch notes:
* ports: lighttpd 1.4.48 `[5] <https://www.lighttpd.net/2017/11/11/1.4.48/>`__
* ports: php 7.1.12 `[6] <https://php.net/ChangeLog-7.php#7.1.12>`__
* ports: pkg 1.10.3 `[7] <https://github.com/freebsd/freebsd-ports/commit/c6da09c68>`__
* ports: py-Jinja2 2.10 `[8] <http://jinja.pocoo.org/docs/2.10/changelog/#version-2-10>`__
* ports: py-jinja 2.10 `[8] <https://jinja.palletsprojects.com/en/stable/changes/#version-2-10>`__
* ports: syslogd 11.1
A hotfix release was issued as 17.7.9_8:

4
source/releases/CE_18.7.rst
View File

@@ -501,7 +501,7 @@ Here are the full patch notes:
* plugins: os-tukan 1.4 (contributed by Team Rebellion)
* plugins: os-vnstat 1.0 (contributed by Michael Muenz)
* plugins: os-zerotier fixes status table (contributed by Christoph Engelbert)
* ports: mpd5 upstream MTU fix `[2] <https://github.com/freebsd/freebsd-ports/commit/7d765cc2f>`__
* ports: mpd upstream MTU fix `[2] <https://github.com/freebsd/freebsd-ports/commit/7d765cc2f>`__
* ports: PHP 7.1.23 `[3] <https://php.net/ChangeLog-7.php#7.1.23>`__
A hotfix release was issued as 18.7.5_1:
@@ -751,7 +751,7 @@ Here are the full patch notes:
* src: resource exhaustion in TCP reassembly `[1] <https://www.freebsd.org/security/advisories/FreeBSD-SA-18:08.tcp.asc>`__
* ports: curl 7.61.0 `[2] <https://curl.haxx.se/changes.html>`__
* ports: hyperscan 4.7.0 `[3] <https://github.com/intel/hyperscan/releases/tag/v4.7.0>`__
* ports: mpd5 upstream fixes `[4] <https://github.com/freebsd/freebsd-ports/commit/67bbe6317>`__ `[5] <https://github.com/freebsd/freebsd-ports/commit/052b84f3ec>`__
* ports: mpd upstream fixes `[4] <https://github.com/freebsd/freebsd-ports/commit/67bbe6317>`__ `[5] <https://github.com/freebsd/freebsd-ports/commit/052b84f3ec>`__
* ports: py-cryptography 2.3 `[6] <https://cryptography.io/en/latest/changelog/#v2-3>`__
* ports: py-idna 2.7 `[7] <https://github.com/kjd/idna/releases/tag/v2.7>`__

4
source/releases/CE_20.1.rst
View File

@@ -487,7 +487,7 @@ And here are the full patch notes against version 20.1-RC1:
Known issues and limitations:
* HardenedBSD 12.1 has been postponed to the next major release
* Legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* Legacy MPD plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* To prevent stale configuration files for remote syslog we advise to setup the new targets first `[9] <https://docs.opnsense.org/manual/settingsmenu.html#logging-targets>`__ and disable the old ones under System: Settings: Logging
* i386 has not been deprecated for the time being ;)
@@ -587,7 +587,7 @@ Known issues and limitations:
* HardenedBSD 12.1 has been postponed to the next major release
* Nano growfs does not work on this release candidate, but a fix for 20.1 already exists
* Installer still advertises 19.7, but a fix for 20.1 already exists
* Legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* Legacy MPD plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates
* i386 has not been deprecated for the time being ;)
The public key for the 20.1 series is:

4
source/releases/CE_20.7.rst
View File

@@ -479,7 +479,7 @@ Here are the full patch notes against version 20.7-RC1:
Known issues and limitations:
* legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp are no longer available
* legacy MPD plugins os-l2tp, os-pppoe and os-pptp are no longer available
* i386 architecture builds are no longer available
The public key for the 20.7 series is:
@@ -594,7 +594,7 @@ Here are the full patch notes against 20.1.8_1:
Known issues and limitations:
* Legacy MPD5 plugins os-l2tp, os-pppoe and os-pptp will no longer be available
* Legacy MPD plugins os-l2tp, os-pppoe and os-pptp will no longer be available
* i386 architecture builds will no longer be available
* Installer still advertises 20.1

14
source/releases/CE_21.7.rst
View File

@@ -337,12 +337,12 @@ Here are the full patch notes:
* src: aesni: avoid a potential out-of-bounds load in aes_encrypt_icm()
* ports: curl 7.79.1 `[6] <https://curl.se/changes.html#7_79_1>`__
* ports: dnspython 2.1.0 `[7] <https://dnspython.readthedocs.io/en/stable/whatsnew.html>`__
* ports: jinja 3.0.1 `[8] <https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-1>`__
* ports: libressl 3.3.5 `[9] <https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.5-relnotes.txt>`__
* ports: lighttpd 1.4.60 `[10] <https://www.lighttpd.net/2021/10/3/1.4.60/>`__
* ports: nss 3.71 `[11] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_71.html>`__
* ports: openvpn 2.5.4 `[12] <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25#Changesin2.5.4>`__
* ports: php 7.4.24 `[13] <https://www.php.net/ChangeLog-7.php#7.4.24>`__
* ports: libressl 3.3.5 `[8] <https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.5-relnotes.txt>`__
* ports: lighttpd 1.4.60 `[9] <https://www.lighttpd.net/2021/10/3/1.4.60/>`__
* ports: nss 3.71 `[10] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_71.html>`__
* ports: openvpn 2.5.4 `[11] <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25#Changesin2.5.4>`__
* ports: php 7.4.24 `[12] <https://www.php.net/ChangeLog-7.php#7.4.24>`__
* ports: py-jinja 3.0.1 `[13] <https://jinja.palletsprojects.com/en/stable/changes/#version-3-0-1>`__
* ports: strongswan 5.9.4 `[14] <https://github.com/strongswan/strongswan/releases/tag/5.9.4>`__
* ports: sudo 1.9.8p2 `[15] <https://www.sudo.ws/stable.html#1.9.8p2>`__
@@ -479,7 +479,7 @@ Here are the full patch notes:
* ports: libressl 3.3.4 `[8] <https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.4-relnotes.txt>`__
* ports: nss 3.69 `[9] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_69.html>`__
* ports: monit 5.29.0 `[10] <https://mmonit.com/monit/changes/>`__
* ports: mpd5 adds L2TP interoperability fix from upstream
* ports: mpd adds L2TP interoperability fix from upstream
* ports: openssl 1.1.1l `[11] <https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md>`__
* ports: php 7.4.23 `[12] <https://www.php.net/ChangeLog-7.php#7.4.23>`__
* ports: strongswan 5.9.3 `[13] <https://github.com/strongswan/strongswan/releases/tag/5.9.3>`__

2
source/releases/CE_22.1.rst
View File

@@ -540,7 +540,7 @@ Here are the full patch notes:
* system: allow severity levels in PHP log messages and mark authentication success messages as notice
* interfaces: fix default handling for VIP nobind option
* interfaces: allow VIP nobind feature on CARP addresses
* interfaces: stop mpd5 daemon before starting
* interfaces: stop MPD process before starting
* interfaces: always show interface in GIF and GRE overview even on VIP use
* interfaces: fix GIF and GRE VIP use loading order in IP alias cases
* interfaces: remove device creation side effect from bridge, LAGG, GIF, GRE and VLAN GUI pages

52
source/releases/CE_25.1.rst
View File

@@ -26,6 +26,58 @@ can be found below as well.
* Full mirror list: https://opnsense.org/download/
--------------------------------------------------------------------------
25.1.3 (March 11, 2025)
--------------------------------------------------------------------------
* system: implement user CSV export/import functionality (sponsored by: m.a.x. it)
* system: switch boot logo and MOTD to the new-style logo (contributed by Gavin Chappell)
* system: migrate 'default' tunable value to empty one and improve UX
* system: bring back user/group audit messages lost in MVC conversion
* system: replace legacy service widget hook with a proper configd call
* interface: use shared base_bootgrid_table and base_apply_button where possible
* interfaces: remove obsolete code in get_real_interfaces() to match getRealInterface()
* interfaces: improve validation for CARP/proxy ARP VIP
* interfaces: remove defunct "other" VIP type
* interfaces: skip "nosync" processing on VIPs
* firewall: support partial alias exports
* kea-dhcp: use shared base_bootgrid_table and base_apply_button
* network time: move XMLRPC definition to correct file
* openvpn: add DCO validation for fragment size
* unbound: use shared base_bootgrid_table and base_apply_button
* unbound: fix model migration pertaining to "dots" model changes
* wireguard: use shared base_bootgrid_table and base_apply_button
* backend: allow pluginctl to filter on -x/-X option
* mvc: decode HTML tags in menu items
* mvc: fix unit tests for model relation fields
* plugins: os-caddy 1.8.3 `[1] <https://github.com/opnsense/plugins/blob/stable/25.1/www/caddy/pkg-descr>`__
* plugins: os-dmidecode 1.2 adds new dashboard widget (contributed by Neil Merchant)
* plugins: os-frr 1.43 `[2] <https://github.com/opnsense/plugins/blob/stable/25.1/net/frr/pkg-descr>`__
* plugins: os-intrusion-detection-content-pt-open 1.0 (contributed by kulikov-a)
* plugins: os-sftp-backup 1.0 allows configuration backups over SFTP
* plugins: os-zabbix-agent 1.15 `[3] <https://github.com/opnsense/plugins/blob/stable/25.1/net-mgmt/zabbix-agent/pkg-descr>`__
* plugins: os-zabbix-proxy 1.12 `[4] <https://github.com/opnsense/plugins/blob/stable/25.1/net-mgmt/zabbix-proxy/pkg-descr>`__
* src: carp: fix checking IPv4 multicast address
* src: icmp: use per rate limit randomized jitter
* src: ixgbe: Fix a logic error in ixgbe_read_mailbox_vf()
* src: netinet6: do not forward to the unspecified address
* src: netinet: do not forward or ICMP response to INADDR_ANY
* src: netinet: ipsec and ktls cannot coexists
* src: pf: align sanity checks for pfrw_free
* src: pf: allow all forms of neighbor advertisements in either direction
* src: pf: cleanup leftover PF_ICMP_MULTI_\* code that is not needed anymore
* src: pf: do not keep state when dropping overlapping IPv6 fragments
* src: pf: drop IPv6 packets built from overlapping fragments in pf reassembly
* src: pf: fix fragment hole count
* src: sysctl: enable vnet sysctl variables to be loader tunable
* ports: mpd default logging level increased to LOG_NOTICE
* ports: nss 3.109 `[5] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_109.html>`__
* ports: pftop 0.12
* ports: py-jinja 3.1.6 `[6] <https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6>`__
--------------------------------------------------------------------------
25.1.2 (February 28, 2025)
--------------------------------------------------------------------------