From 9b3c861bcf4d9821ff3696472d3d579f21411dad Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Thu, 20 Apr 2023 19:37:36 +0200 Subject: [PATCH] changelogs --- source/CE_releases.rst | 2 +- source/releases/CE_23.1.rst | 78 +++++++++++++++++++++++++++++++++++++ 2 files changed, 79 insertions(+), 1 deletion(-) diff --git a/source/CE_releases.rst b/source/CE_releases.rst index 1ae7fae..260f1e7 100644 --- a/source/CE_releases.rst +++ b/source/CE_releases.rst @@ -8,7 +8,7 @@ Community Edition :width: 600px :align: center -As of January 2015 there have been *250* releases leading to the latest version *23.1.5* +As of January 2015 there have been *251* releases leading to the latest version *23.1.6* named "Quintessential Quail". diff --git a/source/releases/CE_23.1.rst b/source/releases/CE_23.1.rst index cc237c4..18970ad 100644 --- a/source/releases/CE_23.1.rst +++ b/source/releases/CE_23.1.rst @@ -29,6 +29,74 @@ can be found below as well. * Full mirror list: https://opnsense.org/download/ +-------------------------------------------------------------------------- +23.1.6 (April 20, 2023) +-------------------------------------------------------------------------- + + +Two major improvements being shipped today are standalone core DNS +support for Bind and Dnscrypt-Proxy plugins as well as OpenVPN group +firewall alias type. The latter makes it easier to manage distinct +policies for connected VPN users. For more details please refer to +the documentation listed below. + +The other honorable mention is the netmap work we have been doing +with Zenarmor and Klara on the FreeBSD kernel side which brings +bridge device support as well as a considerable improvement to the +emulated mode where several packet stalls and mbuf leaks have been +identified and subsequently fixed. This should have an operational +impact on Suricata (IPS mode) and Zenarmor. The state is much better +now but please do not hesitate to contact us about issues that you +might still be having with netmap-based packet flows as the topic is +a rather complex one. + +Orange FR users be aware that your ISP now requires strict VLAN PCP +on all DHCPv4 requests so please now set 'Use VLAN priority' interface +setting for both DHCPv4 and DHCPv6. The 'Option Modifiers' override +for "vlan-pcp" in DHCPv4 can be removed. + +Here are the full patch notes: + +* system: register DNS service ports for unified use across core and plugins +* system: serialize deferred requests for web GUI restart +* system: relocate API messages to backend log target as they currently end up in captive portal logs +* system: remove /31 subnet restriction in wizard +* system: use data attribute to find existing rows in service widget to avoid special character issues (contributed by Alexander O'Mara) +* system: allow non-system group delete after faulty PHP 8 warning fix (contributed by kulikov-a) +* system: handle empty DNS server gateway (contributed by Nicolas Thumann) +* reporting: translate invalid interface name characters for NetFlow/Netgraph use +* reporting: sort interfaces by description in health graphs +* interfaces: ping diagnostic tool was rewritten using MVC/API +* interfaces: allow to set PCP value on IPv4 DHCP traffic to address recent Orange FR changes +* firewall: allow to create aliases for logged-in OpenVPN users `[1] `__ +* firewall: leave out fractional seconds from timestamps in aliases +* firewall: fix progress bar default value (contributed by Nicolas Thumann) +* dhcp: fix too many addresses issue in radvd RDNSS setting +* dhcp: add missing double quotes in hostname handling +* firmware: remove flavouring support from update tools +* ipsec: pull data for dashboard widget exclusively from backend +* ipsec: move XAuth out of "IKE Extensions" block +* ipsec: add connection child as option for manual SPDs +* ipsec: another small GUI fix for basic log option in advanced settings +* openvpn: fix dashboard widget and add missing byte data to status call +* plugins: os-bind 1.26 `[2] `__ +* plugins: os-crowdsec 1.0.4 `[3] `__ +* plugins: os-ddclient 1.12 `[4] `__ +* plugins: os-dnscrypt-proxy 1.13 `[5] `__ +* plugins: os-nginx 1.32 `[6] `__ +* plugins: os-upnp now allows subnet mask 0 in rules (contributed by Reiko Asakura) +* src: bridge: add support for emulated netmap mode `[7] `__ +* src: epair: also remove vlan metadata from mbufs +* src: ifconfig: fix configuring if_bridge with additional operating parameters +* src: netmap: fix queue stalls with generic interfaces `[8] `__ +* src: netmap: assorted upstream stable patches +* src: sched_ule: assorted fixes to address issues on newer AMD platforms +* ports: curl 8.0.1 `[9] `__ +* ports: ifinfo now also prints interface index (contributed by Nicolas Thumann) +* ports: php 8.1.17 `[10] `__ + + + -------------------------------------------------------------------------- 23.1.5 (March 29, 2023) -------------------------------------------------------------------------- @@ -68,6 +136,16 @@ Here are the full patch notes: * ports: openssl fix for CVE-2023-0464 * ports: radvd fix for SIGHUP behaviour +A hotfix release was issued as 23.1.5_2: + +* firewall: ignore empty lines when reading current alias content using pfctl +* network time: revert PID file use as it is still unreliable with ntpd + +A hotfix release was issued as 23.1.5_4: + +* openvpn: fix typo in widget missing virtual address display +* unbound: translate empty values to empty strings in DNSBL module + --------------------------------------------------------------------------