diff --git a/source/CE_releases.rst b/source/CE_releases.rst index 6b24ef70..43f774e5 100644 --- a/source/CE_releases.rst +++ b/source/CE_releases.rst @@ -8,7 +8,7 @@ Community Edition :width: 600px :align: center -As of January 2015 there have been *295* releases leading to the latest version *24.7.7* +As of January 2015 there have been *296* releases leading to the latest version *24.7.8* named "Thriving Tiger". diff --git a/source/releases/CE_24.7.rst b/source/releases/CE_24.7.rst index 1886988a..a8eb6e5c 100644 --- a/source/releases/CE_24.7.rst +++ b/source/releases/CE_24.7.rst @@ -30,6 +30,57 @@ can be found below as well. * Full mirror list: https://opnsense.org/download/ +-------------------------------------------------------------------------- +24.7.8 (November 06, 2024) +-------------------------------------------------------------------------- + + +Minor update with FreeBSD security advisories and a number of stable +branch patches for various Intel drivers. Two problems with the RRD +rework are herby fixed as well. + +Here are the full patch notes: + +* system: add missing MinProtocol in OpenSSL config template from trust settings +* system: add SignatureAlgorithms option and fix minor form glitch in trust settings +* system: bring CRLs into bundles as well +* system: sync certctl to FreeBSD 14.1 base code et al +* reporting: isset() vs. empty() on RRD enable +* reporting: fix regression in RRD temperature readings +* interfaces: parse part of SFP module information in legacy_interfaces_details() +* firewall: add a note about stateless TCP during syncookie use +* firewall: enhance validation that group name can not start or end with a digit +* firmware: improve health script and use config.sh +* firmware: rework CRL check in config.sh +* firmware: use the trust store for CRL verification +* lang: update available translations +* ipsec: add swanctl.conf download button to settings page +* ipsec: add description field to pre-shared-keys +* isc-dhcp: safeguard output type for json_decode() in leases page +* unbound: allow RFC 2181 compatible names in overrides +* mvc: fix UpdateOnlyTextField incompatibility with DependConstraint (contributed by kumy) +* plugins: os-bind 1.33 `[1] `__ +* plugins: os-caddy 1.7.4 `[2] `__ +* plugins: os-etpro-telemetry lowers log level of collection invoke (contributed by doktornotor) +* plugins: os-iperf fixes JS TypeError when parsing result (contributed by Leo Huang) +* plugins: os-tinc removes "pipes" Python module dependency (contributed by andrewhotlab) +* src: multiple issues in the bhyve hypervisor `[3] `__ +* src: unbounded allocation in ctl(4) CAM Target Layer `[4] `__ +* src: XDG runtime directory file descriptor leak at login `[5] `__ +* src: assorted FreeBSD stable patches for Intel ixgbe, igb, igc and e1000 drivers +* src: cxgb: register ifmedia callbacks before ether_ifattach +* src: enc: use new KPI to create enc interface +* src: ifconfig: fix wrong indentation for the status of pfsync +* src: iflib: simplify iflib_legacy_setup +* src: iflib: use if_alloc_dev() to allocate the ifnet +* src: netmap: make memory pools NUMA-aware +* src: vlan: handle VID conflicts +* ports: libpfctl 0.14 +* ports: nss 3.106 `[6] `__ +* ports: php 8.2.25 `[7] `__ + + + -------------------------------------------------------------------------- 24.7.7 (October 23, 2024) --------------------------------------------------------------------------