Good day everyone,

originally, we wanted to make 15.7.14 as boring as possible, but now we’re shipping our major firewall section rework on top of intricate configuration management fixes instead. We should also note that the former improved configuration imports from older systems. Be sure to let us know when you find any issues with these changes.

From the third-party and/or security side not much has happened recently. We’re shipping the latest Bind and Squid, for details see the provided links. Here are the full patch notes:

• config: don’t set login auto-complete on factory reset
• config: fix faulty timezone on factory reset
• config: improve config migration path for legacy config imports
• config: new home in system section for the config history and backups
• config: improved the config history differential view
• notable port upgrades: bind 9.10.3 [1], squid 3.5.9 [2]
• firmware: added Supranet Communications mirror (Middleton, US)
• firewall: reworked rules, schedules, virtual ip, nat and aliases pages
• users: removed special handling of the `all’ group
• crash reporter: fixed 9 minor problem reports
• wireless: only advertise supported modes of operation
• system: fix theme selection for user-added themes
• menu: fix expand on all interface edit pages
• ntp: improve service status probing
• diagnostics: fix authentication tester to work in conjunction with translations
• languages: added French translation (33% complete)
• languages: updated German translation (57% complete)

Stay safe,
Your OPNsense team
—
[1] https://kb.isc.org/article/AA-01306/0/BIND-9.10.3-Release-Notes.html
[2] http://ftp.meisei-u.ac.jp/mirror/squid/squid-3.5.9-RELEASENOTES.html