Software Update: OPNsense 17.7.10

The package OPNsense is a firewall with extensive opportunities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up completely via a web interface and has support for 2fa, openvpn, ipsec, carp and captive portal, among others. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 17.7.10 with the following announcement:

OPNsense 17.7.10 released

good day everyone,

A regression sneaked into 17.7.9 that updated Lighttpd web server which made the captive portal incompatible with the newer version. We are also bundling OpenSSL updates for both the ports and source. Last but not least, Suricata and Hyperscan have been bumped to their latest versions.

Here are the full patch notes:

• system: allow user-based language setting through Lobby: Password
• system: allow strict interface binding for OpenSSH
• system: prepare for MVC-based routing pages
• firmware: prepare for production / development release type selection
• firewall: fix a PHP warning when no user rules are installed
• firewall: add refresh button to table diagnostics page
• captive portal: fix chroot regression since lighttpd web server update in 17.7.9
• interfaces: provide a link-local IPv6 when asking for addresses
• intrusion detection: sync port-groups to default template
• ipsec: upgrade vici lib to match strongSwan package
• network time: fix a PHP warning during NMEA deselect
• mvc: do not throw disabled errors in handler
• plugins: os-dyndns 1.4_1 fixes issue with Namecheap error parsing
• plugins: os-freeradius 1.4.0 adds log viewer and fixes users write (contributed by Michael Muenz)
• plugins: os-quagga 1.4.3 adds OSPF firewall rule and spinners for save (contributed by Fabian Franz)
• src: OpenSSL multiple vulnerabilities
• ports: hyperscan 4.6.0
• ports: openssl 1.0.2n
• ports: suricata 4.0.3

stay safe,
Your OPNsense team