Software-update: OPNSense 26.7.1

Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor mfa, OpenVPN, IPsec, CARP en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars achter OPNsense hebben de eerste update voor versie 26.7 uitgebrachten de releasenotes voor die uitgave kunnen hieronder worden gevonden.

OPNsense 26.7.1 released

This is a small stable release addressing some of the upgrade related issues that were reported last week as well as 4 new security advisories for the core code. Here are the full patch notes:

system: add correct release name to boot splash screen for 26.7system: disable web GUI KTLS use for the time beingsystem: do not let the components selectpicker grow indefinitely in defaults pagesystem: DTLSv1.1 is forcefully rejected by OpenSSL 3.5, migrate to DTLSv1.2system: use Bootstrap "btn" styles in services widgetsystem: use serialNumberHex for CRL so high-bit serials are not dropped (contributed by chrstnth)system: lower max-request-size to roughly max post size in lighttpd configssystem: fixed several PHP 8.5 warningsfirewall: use "urgent" as empty default for firewall debug messagesfirewall: skip message banner if searchPhrase setfirewall: fix PHP warning when scrub yields no interfacescaptive portal: automatic block rule should be evaluated after the anti-lockout ruleopenvpn: client export can export private keys for unlisted certificate referencesbackend: remove cache file on execution error in script_outputmvc: fix tab/subtab form generation for pluginsmvc: fix default labels in selectpickersmvc: form labels can be empty so make sure to add them to avoid warnings in formsmvc: safeguard some write operations with missing throwReadOnly() actions for custom actionui: fix multiple stored XSSplugins: os-theme-rebellion 1.9.5 (contributed by Team Rebellion)ports: ca_root_nss / nss 3.125

system: add correct release name to boot splash screen for 26.7

system: disable web GUI KTLS use for the time being

system: do not let the components selectpicker grow indefinitely in defaults page

system: DTLSv1.1 is forcefully rejected by OpenSSL 3.5, migrate to DTLSv1.2

system: use Bootstrap "btn" styles in services widget

system: use serialNumberHex for CRL so high-bit serials are not dropped (contributed by chrstnth)

system: lower max-request-size to roughly max post size in lighttpd configs

system: fixed several PHP 8.5 warnings

firewall: use "urgent" as empty default for firewall debug messages

firewall: skip message banner if searchPhrase set

firewall: fix PHP warning when scrub yields no interfaces

captive portal: automatic block rule should be evaluated after the anti-lockout rule

openvpn: client export can export private keys for unlisted certificate references

backend: remove cache file on execution error in script_output

mvc: fix tab/subtab form generation for plugins

mvc: fix default labels in selectpickers

mvc: form labels can be empty so make sure to add them to avoid warnings in forms

mvc: safeguard some write operations with missing throwReadOnly() actions for custom action

ui: fix multiple stored XSS

plugins: os-theme-rebellion 1.9.5 (contributed by Team Rebellion)

ports: ca_root_nss / nss 3.125

Source: Tweakers.net