OPNsense 16.1.11 released

 Hi everyone,

We are skipping a bit ahead with 16.1.11 to address a CSRF vulnerability, which shows us the good path we have been on since we started[1] and we will surely continue this security-aware trend.

In other news, this update includes native GeoIP alias support, captive portal voucher customisations requested by many and the last batch of Russian, effectively bringing it to 100% completed. Wow!

Here is the full change log:

• services: fix CSRF vulnerability in status_services.php[2]
• dhcp: bring back usage of the authoritative directive
• system: allow periodic backups of RRD and DHCP for non-MFS
• captive portal: add option for less secure passwords, password and username length
• firewall: add GeoIP aliases feature
• openvpn: status page would not show the correct process status
• languages: completed Russian translation (contributed by Smart-Soft Ltd.)
• languages: updated French

Stay safe,
Your OPNsense team