Software-update: pfSense 2.4.3-p1 / 2.3.5-p2

Het pfSense project is in 2004 begonnen als een afsplitsing van m0n0wall vanwege verschillende visies bij de ontwikkelaars, en in de loop van de jaren uitgegroeid tot een router- en firewallpakket dat in zowel kleine als zeer grote omgevingen kan worden ingezet. Voor meer informatie verwijzen we naar deze pagina. Het ontwikkelteam heeft pfSense 2.4.3-p1 en 2.3.5-p2 uitgebracht met de volgende veranderingen:

pfSense 2.4.3-RELEASE-p1 and 2.3.5-RELEASE-p2 now available

Highlights

This release includes several important security patches, including the issues discussed last week:

• FreeBSD Security Advisory for CVE-2018-8897 FreeBSD-SA-18:06.debugreg
• FreeBSD Errata Notice for CVE-2018-6920 and CVE-2018-6921 FreeBSD-EN-18:05.mem
• Fixed a potential LFI in pkg_mgr_install.php #8485 pfSense-SA-18_04.webgui
• Fixed a potential XSS in pkg_mgr_install.php #8486 pfSense-SA-18_05.webgui

Additionally, 2.3.5-p2 includes corrections for items already addressed in the 2.4.x release branch:

• Fixed a potential XSS vector in RRD error output encoding #8269 pfSense-SA-18_01.packages
• Fixed a potential XSS vector in diag_system_activity.php output encoding #8300 pfSense-SA-18_02.webgui
• Changed sshd to use delayed compression #8245
• Added encoding for firewall schedule range descriptions #8259

Aside from security updates, the new versions include a handful of beneficial bug fixes for various minor issues. For a complete list of changes, see the 2.4.3-p1 Release Notes and 2.3.5-p2 Release Notes.

Important Information

At this time, pfSense 2.3.x is a Security and Errata maintenance branch only. pfSense 2.4.x is the primary stable supported branch. If the firewall hardware is capable of running pfSense 2.4.x, consider upgrading to that release instead. If you have not yet upgraded to pfSense version 2.4.0 or later, read the information in the 2.4.0 Release Announcement before updating for important information that may impact the ability of a firewall to upgrade to pfSense version 2.4.x. If either by choice or by hardware limitations a firewall cannot be upgraded to pfSense 2.4.x, see the pfSense 2.3.5-RELEASE announcement for information on obtaining the latest 2.3.x release.

Versienummer	2.4.3-p1 / 2.3.5-p2
Releasestatus	Final
Besturingssystemen	BSD
Website	pfSense
Download	https://www.netgate.com/blog/pfsense-2-4-3-release-p1-and-2-3-5-release-p2-now-available.html
Licentietype	GPL