Software Update: OPNsense 22.1.5

The package OPNsense is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up completely via a web interface and has support for 2fa, openvpn, ipsec, carp and captive portal, among others. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 22.1.5 with the following announcement:

Here are the full patch notes:

• system: set up all DNS system routes from system_resolvconf_generate()
• system: properly clear legacy files when clearing log files
• reporting: add ACPI and ARM temperature support to health data
• interfaces: do not assume exclusive use of router file in IPv6 PPPoE case
• interfaces: for symmetry with PPPoE do not reload WAN when address disappears
• interfaces: VLAN UX changes include better tag and parent visibility and handling
• interfaces: improve VLAN parent selection for batch changes to allow for a single apply
• interfaces: hint at missing apply when trying to add a new interface in assignment page
• captive portal: prevent cleansing password field
• dhcp: give a hint on why an interface was ignored in radvd
• firmware: exclude revision matching from latest changelog version check
• unbound: add custom forwarding and overrides MVC pages
• ui: omit total entries display for log grids
• plugins: os-acme-client 3.9
• plugins: os-chrony 1.5
• plugins: os-ddclient 1.5
• src: pf(4) tables may fail to load
• src: potential jail escape vulnerabilities in netmap
• src: bhyve e82545 device emulation out-of-bounds write
• src: mpr/mps/mpt driver ioctl heap out-of-bounds write
• src: 802.11 heap buffer overflow
• src: zlib compression out-of-bounds write
• ports: curl 7.82.0
• ports: expat 2.4.8
• ports libxml 2.9.13
• ports: monit 5.32.0
• ports: nss 3.77
• ports:python 3.8.13