Hi there,

This is the end of life release for the 21.1 series with 21.7 being released tomorrow. The upgrade path will be added later on said release day as soon as we have confirmed that everything is fine.

See you on the other side. ;)

Here are the full patch notes:

- system: prevent excessive config writes on LDAP import
- system: do not split XMLRPC password into multiple pieces
- system: fix IPv4 /31 assignment address assignment in shell
- interfaces: clear PPPoE SLAAC addresses on linkdown
- firewall: add live log support for new filterlog format
- dhcp: fix processing domain search list on static IPv6
- openvpn: fix invalid rules generated by wizard (contributed by kulikov-a)
- openvpn: validate tunnel prefix to avoid OpenVPN 2.5 start errors (contributed by kulikov-a)
- mvc: catch all errors including syntax and class not found errors
- plugins: os-acme-client 2.6[1]
- plugins: os-freeradius 1.9.15[2]
- plugins: os-haproxy 3.4[3]
- plugins: os-zabbix-agent 1.9[4]
- ports: curl 7.78.0[5]
- ports: filterlog adds CARP IPv6 support and moves label to previously reserved spot
- ports: nss 3.68[6]
- ports: php 7.4.21[7]
- ports: python 3.7.11[8]
- ports: syslog-ng 3.33.2[9]

A hotfix release was issued as 21.1.9_1:

- firmware: enable upgrade path to 21.7
- firmware: add "-q" option for in-place opnsense-bootstrap run
- firmware: fix grep call on FreeBSD 13 (contributed by Mariusz Zaborski)
- firmware: correct return code on type change in opnsense-update
- firmware: fix opnsense-code pull when ABI configuration is no longer there
- firmware: fix upgrade with multiple repositories enabled

Stay safe,
Your OPNsense team