OPNsense 16.1.8 released

 
Hello there,

This quick 16.1.8 release is not a big update, but it means a lot. We have finished our full sweep of the GUI to update the look and feel of all pages and made the code ready for what is to come now: new features that are on our roadmap for 16.7. The first one will be the HTTPS proxy, but there is also NetFlow and improved statistics / reporting on the shortlist.

A day after 16.1.7 was out last week, FreeBSD 10.2-RELEASE-p14 was announced. Of the four patches enclosed, the two Hyper-V patches we have already brought to OPNsense over a month ago, the OpenSSH patch does not apply since we only use the port and already had it up-to-date. That leaves us with only one patch that we are shipping now to complete the experience.

Attention to everyone using OpenVPN + cryptodev acceleration: the cryptodev module along with older crypto drivers has been removed from the kernel itself, which means that if you need to keep using it, go to System: Settings: Misc and reconfigure your crypto hardware including an enable of cryptodev usage.

New images based on 16.1.8 will be out early next week.

Here are the full patch notes:

• src: updated tzdata to version 2016b[1]
• src: fix incorrect argument validation in sysarch[2]
• src: fix pfi_table_update: cannot set new addresses
• src: added APU2 temperature sensor support
• ports: unbound 1.5.8[3], sudo 1.8.16[4], pcre 8.38[5]
• proxy: better matching for overlapping URLs
• universal plug and play: refactored pages for improved look and feel
• vpn: refactored L2TP and PPTP pages for improved look and feel
• openvpn: fix missed configure stage for Peer to Peer (TLS/SSL) mode
• system: reworked the behaviour of thermal and crypto modules
• firewall: tweaked a few rule indicator icons to improve clarity
• firewall: improved alias validation on edit
• interfaces: also add previous DHCP override fixes for IPv6
• language: updated French and German

Stay safe,
Your OPNsense team