pfSense 2.4.4 p1 发布，防火墙和路由器软件

内容简介：pfSense 2.4.4-p1 发布。 SECURITY / ERRATA This release includes several important security patches: FreeBSD Errata Notice FreeBSD-EN-18:09.ip: IP fragment remediation causes IPv6 fragment reassemb...

pfSense 2.4.4-p1 发布。

SECURITY / ERRATA

This release includes several important security patches:

• FreeBSD Errata Notice FreeBSD-EN-18:09.ip: IP fragment remediation causes IPv6 fragment reassembly failure #8934

• FreeBSD Errata Notice FreeBSD-EN-18:10.syscall NULL pointer dereference in freebsd4_getfsstat system call (CVE-2018-17154)

• FreeBSD Errata Notice FreeBSD-EN-18:11.listen Denial of service in listen syscall over IPv6 socket (CVE-2018-6925)

• FreeBSD Errata Notice FreeBSD-EN-18:12.mem Small kernel memory disclosures in two system calls (CVE-2018-17155)

• Fixed a potential authenticated command injection issue with PowerD settings. pfSense-SA-18_09.webgui #9061

• Fixed handling of privileges on the All group that were previously ignored.

  Warning: Check the privileges on the All group before upgrading to avoid unintended privileges for accounts being respected that were not honored before.

NOTABLE BUG FIXES

• Fixed various sources of PHP 7.2 errors throughout the code base.

• Updated Unbound to 1.8.1 to address issues with memory leaks, especially in DNS over TLS support.

• Updated strongSwan to 5.7.1.

• Improved IPsec VTI compatibility with third-party vendor implementations.

• The filterdns daemon has been completely rewritten to address a number of issues.

• Fixed issues with package reinstallation after restoring a configuration backup.

• Fixed issues with Hyper-V hn(4) network interfaces and IPv6 as well as issues with ALTQ.

NOTABLE NEW FEATURES

• Added GUI options to control sshguard sensitivity and whitelisting to allow users to fine-tune the behavior of the brute force login protection.

• Added support for LDAP client certificates on authentication servers. (Factory only)

• Added schedule (cron) support to AutoConfigBackup.

【声明】文章转载自：开源中国社区 [http://www.oschina.net]

以上就是本文的全部内容，希望本文的内容对大家的学习或者工作能带来一定的帮助，也希望大家多多支持 码农网

查看所有标签

本站部分资源来源于网络，本站转载出于传递更多信息之目的，版权归原作者或者来源机构所有，如转载稿涉及版权问题，请联系我们。