OPNsense Forum

English Forums => 25.1, 25.4 Production Series => Topic started by: Spiky_Gladiator on March 15, 2025, 07:39:16 PM

Title: Half-Failed OPNSense update ? (25.1 to 25.1.3)
Post by: Spiky_Gladiator on March 15, 2025, 07:39:16 PM
Hi,

I tried updating OPNSense version 25.1 to 25.1.3 but something strange happened during the update process. At first everything went fine and the last thing I noticed in the Web GUI Log was:

SECURITY RECOMMENDATION
~~~~~~~~~~~~~~~~~~~~~~~
It is recommended to enable the wpad-related options
at the end of the configuration file (you may need to
copy them from the example file to yours) to fix
CERT Vulnerability VU#598349.
You may need to manually remove /usr/local/etc/syslog-ng.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
You may need to manually remove /usr/local/etc/kea/kea-ctrl-agent.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/kea/kea-dhcp4.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/kea/keactrl.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/ssh/sshd_config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/classification.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/reference.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/suricata.yaml if it is no longer needed.

After which I got the following error message in the GUI:
Danger: Unexpected error, check log for details.
Then it suddenly started downloading OPNSense Kernel 25.1.3 and other packages and installing them. The error was very vague and didn't mentioned anything useful. Any idea which logs I can check to verify what went wrong ? This is a bit concerning, the update took a bit of time to finish and on the surface everything is working fine but I want to diagnose what went wrong during the update, any idea where I can look ?


Thanks
Title: Re: Half-Failed OPNSense update ? (25.1 to 25.1.3)
Post by: newsense on March 15, 2025, 09:47:58 PM
The wpad bit is just noise, can be ignored.

Do a healthcheck and post the results here. The "danger" bit without context is useless.