Hello there,

This quick 16.1.8 is not a big update, but it means a lot.  We have
finished our full sweep of the GUI to update the look and feel of all
pages and made the code ready for what is to come now: new features
that are on our roadmap for 16.7.  The first one will be the HTTPS
proxy, but there is also NetFlow and improved statistics / reporting
on the shortlist.

A day after 16.1.7 was out last week, FreeBSD 10.2-RELEASE-p14 was
announced.  Of the four patches enclosed, the two Hyper-V patches we
have already brought to OPNsense over a month ago, the OpenSSH patch
does not apply since we only use the port and already had it up-to-date.
That leaves us with only one patch that we are shipping now to complete
the experience.

Attention to everyone using OpenVPN + cryptodev acceleration: the
cryptodev module along with older crypto drivers has been removed
from the kernel itself, which means that if you need to keep using
it, go to System: Settings: Misc and reconfigure your crypto hardware
including an enable of cryptodev usage.

The refreshed images for 16.1 (based on 16.1.8) have been pushed to
the mirrors.  You can find the checksums attached at the end of this
announcement.

https://opnsense.org/download/

Here are the full patch notes:

o src: updated tzdata to version 2016b[1]
o src: fix incorrect argument validation in sysarch[2]
o src: fix pfi_table_update: cannot set new addresses
o src: added APU2 temperature sensor support
o ports: unbound 1.5.8[3], sudo 1.8.16[4], pcre 8.38[5]
o proxy: better matching for overlapping URLs
o universal plug and play: refactored pages for improved look and feel
o vpn: refactored L2TP and PPTP pages for improved look and feel
o openvpn: fix missed configure stage for Peer to Peer (TLS/SSL) mode
o system: reworked the behaviour of thermal and crypto modules
o firewall: tweaked a few rule indicator icons to improve clarity
o firewall: improved alias validation on edit
o interfaces: also add previous DHCP override fixes for IPv6
o language: updated French and German


Stay safe,
Your OPNsense team

--
[1] http://mm.icann.org/pipermail/tz-announce/2016-March/000036.html
[2] https://www.freebsd.org/security/advisories/FreeBSD-SA-16:15.sysarch.asc
[3] https://nlnetlabs.nl/projects/unbound/download/
[4] https://www.sudo.ws/stable.html#1.8.16
[5] http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup

SHA256 (OPNsense-16.1.8-OpenSSL-cdrom-amd64.iso.bz2) = 6cdf41e71ad98499bc1c787f03c1e7d055855434c1a7c7917d147a27b18eaecf
SHA256 (OPNsense-16.1.8-OpenSSL-nano-amd64.img.bz2) = d290d9e4d63b5998573b88b4c5fbcee8a4af8448aaa363476945de075d20efd1
SHA256 (OPNsense-16.1.8-OpenSSL-serial-amd64.img.bz2) = cbf459c8b0313cbd601af478317f2227e360871e83f60a3891be4b94a4feb948
SHA256 (OPNsense-16.1.8-OpenSSL-vga-amd64.img.bz2) = 3d75b4e6a24a26e081a267b06b24b71cce15ab965e502cc66575fe6225cb9eb9

SHA256 (OPNsense-16.1.8-OpenSSL-cdrom-i386.iso.bz2) = a25550ce5468903eb020da5e7a2bda6e306a92eb5c84949604c12cb3ffafa7f8
SHA256 (OPNsense-16.1.8-OpenSSL-nano-i386.img.bz2) = 3a00cfba7c43fd63114616d3ee8964c953bbb69c53f284d69617b93d61aaa677
SHA256 (OPNsense-16.1.8-OpenSSL-serial-i386.img.bz2) = 775ec2fc3a74996d1fa9b083799e25f6c4a28943ff0ce4508fbe44e897879748
SHA256 (OPNsense-16.1.8-OpenSSL-vga-i386.img.bz2) = 919675cbec826ea81076a68985860c0d18da1a7c81d37636207b4f5e14d44c5b

MD5 (OPNsense-16.1.8-OpenSSL-cdrom-amd64.iso.bz2) = f585005298cc39c3ad6629f71e6102ad
MD5 (OPNsense-16.1.8-OpenSSL-nano-amd64.img.bz2) = 729f5c34254cdca51ae5ae1c50600ab3
MD5 (OPNsense-16.1.8-OpenSSL-serial-amd64.img.bz2) = bb62af11eb4c3abe03b4f5fa3187ff1a
MD5 (OPNsense-16.1.8-OpenSSL-vga-amd64.img.bz2) = f2331360601744806e8f34c03fa8c6f2

MD5 (OPNsense-16.1.8-OpenSSL-cdrom-i386.iso.bz2) = e9a09094665b1183f49d42b9d5a2b785
MD5 (OPNsense-16.1.8-OpenSSL-nano-i386.img.bz2) = ecd4c75c1d5aee3189958faa9102c851
MD5 (OPNsense-16.1.8-OpenSSL-serial-i386.img.bz2) = 8b9429912fd0d7f853e238e5cee4866c
MD5 (OPNsense-16.1.8-OpenSSL-vga-i386.img.bz2) = 509e381469817ab9c749f7a29956ea94
