diff --git a/source/CE_releases.rst b/source/CE_releases.rst index 67a0b812..7619b190 100644 --- a/source/CE_releases.rst +++ b/source/CE_releases.rst @@ -8,7 +8,7 @@ Community Edition :width: 600px :align: center -As of January 2015 there have been *264* releases leading to the latest version *23.7.4* +As of January 2015 there have been *265* releases leading to the latest version *23.7.5* named "Restless Roadrunner". diff --git a/source/releases/CE_23.7.rst b/source/releases/CE_23.7.rst index dd1bab1a..427c7adc 100644 --- a/source/releases/CE_23.7.rst +++ b/source/releases/CE_23.7.rst @@ -26,6 +26,82 @@ can be found below as well. * Full mirror list: https://opnsense.org/download/ +-------------------------------------------------------------------------- +23.7.5 (September 26, 2023) +-------------------------------------------------------------------------- + + +Today introduces a change in MTU handling for parent interfaces mostly +noticed by PPPoE use where the respective MTU values need to fit the +parent plus the additional header of the VLAN or PPPoE. Should the +MTU already be misconfigured to a smaller value it will be used as +configured so check your configuration and clear the MTU value if you +want the system to decide about the effective parent MTU size. + +Another change in far gateway handling is also included which prevents +a monitoring failure if that particular gateway was not being designated +as default during boot which made the routing table miss the essential +interface route and monitoring would always report it as down. Now the +interface route is ensured but not only when applying the default gateway +so that it works all the time. + +Also fixed was the problematic migration of the Unbound interfaces settings +which now clears the possibly unknown interfaces in order to proceed and +have Unbound up and running post update which was not the case for some +users previously. + +Other reliability improvements and third party security updates are +included as well. We also continue our effort to clean up the interface +handling code and audit the MVC model files for consistency. A missing +change for out of the box DS-Lite support is also being tested on the +development version now and will likely hit in 23.7.6. + +Here are the full patch notes: + +* system: pluginctl: allow -f mode to drop config properties +* system: switch to /usr/sbin/nologin as authoritative command location +* system: remove remaining spurious ifconfig data pass to Gateways class +* system: fix data cleansing issue in "column_count" and "sequence" values on dashboard +* system: start gateway monitors after firewall rules are in place (contributed by Daggolin) +* system: refactor far gateway handling out of default route handling +* interfaces: use interfaces_restart_by_device() where appropriate +* interfaces: allow get_interface_ipv6() to return in all three IPv6 variants +* interfaces: add GRE/GIF/bridge/wlan return values +* interfaces: signal wlan device creation success/failure +* interfaces: update link functions for GIF/GRE +* interfaces: remove the ancient OpenVPN-tap-on-a-bridge magic on IPv4 reload +* interfaces: update read-only bridge member code +* interfaces: redirect after successful interface add +* interfaces: add interface return feature for use on bridges/assignment page +* interfaces: VIP model style update +* interfaces: implement interface_configure_mtu() +* firewall: fix cleanup issue when renaming an alias +* dhcp: make dhcrelay code use the Gateways class +* ipsec: add local_port and remote_port to connections (contributed by Monviech) +* openvpn: force instance interface down before handing it over to daemon +* openvpn: add missing up and down scripts to instances (contributed by Daggolin) +* unbound: properly set a default value for private address configuration +* unbound: allow disabled interfaces in interface field +* unbound: migrate active/outgoing interfaces discarding invalid values +* unbound: UX improvements on several pages +* unbound: update model +* mvc: update diagnostics models +* mvc: add isLinkLocal() +* interfaces: allow clean MVC access to primary IPv4 address (pluginctl -4 mode) +* plugins: os-upnp replaces calls to obsolete get_interface_ip() +* plugins: os-rfc2136 replaces calls to obsolete get_interface_ip[v6]() +* plugins: os-sunnyvalley 1.3 changes repository URL (contributed by Sunnyvalley) +* plugins: os-tinc adds missing subnet-down script (contributed by andrewhotlab) +* ports: curl 8.3.0 `[1] `__ +* ports: nss 3.93 `[2] `__ +* ports: openssl 1.1.1w `[3] `__ +* ports: phalcon 5.3.1 `[4] `__ +* ports: phpseclib 3.0.23 `[5] `__ +* ports: sqlite 3.43.1 `[6] `__ +* ports: suricata 6.0.14 `[7] `__ + + + -------------------------------------------------------------------------- 23.7.4 (September 14, 2023) --------------------------------------------------------------------------