Skip to content

pfSense REST API v2.9.0

Latest
Latest

Choose a tag to compare

View all tags
@jaredhendrickson13 jaredhendrickson13 released this 29 Jul 03:48
v2.9.0
d040fa6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Important

This release contains a fix for a potential high severity vulnerability found in the /api/v2/system/restapi/settings/sync endpoint. For more information, please refer to GHSA-8q8g-9f77-8g8g.

New

  • Adds /api/v2/system/hasync endpoint to configure XMLRPC configuration sync #843
  • Adds /api/v2/status/wireguard/tunnels endpoint to view status of current WireGuard tunnels #790
  • Adds /api/v2/status/wireguard/peers endpoint to view status of current WireGuard peers #790

Breaking changes

  • RESTAPISettings hasync_username now must hold page-all privileges to successfully sync on HA peers
  • RESTAPISettings hasync must now be enabled on remote HA peers before settings sync can occur

Fixes

  • Addresses a potential privilege escalation issue in /api/v2/system/restapi/settings/sync
  • Fixes a weak deserialization pattern in /api/v2/system/restapi/settings/sync

New Contributors

Full Changelog: v2.8.4...v2.9.0

Contributors

TechAsen
Assets 9
Loading