OPNsense 15.7.6 released

Franco Fichtner franco at opnsense.org
Fri Jul 31 17:18:21 CEST 2015


Hello everyone,

this is 15.7.6 due to several security advisories for
FreeBSD as well as OpenSSH and Bind problems.  Reference
links are provided for external issues as always. More
crash reports came in for issues that date back to as
much as a few years long before we started OPNsense.  We
are very happy for the chance to finally flush them out
of the code base. 

The update requires a reboot. Here are the full patch
notes:

o src: shell injection vulnerability in patch(1) [1]
o src: resource exhaustion in TCP reassembly [2]
o src: OpenSSH multiple vulnerabilities [3]
o ports: phalcon 2.0.6 [4], openssh 6.9p1 [5],
	bind 9.10.2P3 [6], dnsmasq 2.74 [7]
o opnsense-update: can now replace mirror locations
o crash reporter: fixed numerous remotely-submitted
	warnings and bugs
o universal plug and play: fixed concurrent enable for
	UPnP and NAT-PMP (Contributed by Chong Cheung)
o intrusion detection: reload general settings after
	download
o intrusion detection: revised rule and ruleset toggle
o firmware: better upgrade reboot detection
o proxy: fix service start when IPv6 was disabled via
	system settings
o system: revised the VLAN acceleration disable option
	to properly unset the interface flags


Stay safe,
Your OPNsense team
--
[1] https://www.freebsd.org/security/advisories/FreeBSD-SA-15:14.bsdpatch.asc
[2] https://www.freebsd.org/security/advisories/FreeBSD-SA-15:15.tcp.asc
[3] https://www.freebsd.org/security/advisories/FreeBSD-SA-15:16.openssh.asc
[4] https://github.com/phalcon/cphalcon/releases/tag/phalcon-v2.0.6
[5] http://www.openssh.com/txt/release-6.9
[6] https://kb.isc.org/article/AA-01280/81/BIND-9.10.2-P3-Release-Notes.html
[7] http://www.thekelleys.org.uk/dnsmasq/CHANGELOG


More information about the announce mailing list