Hi there,

This is the end of life release for the 21.1 series with 21.7 being released tomorrow. The upgrade path will be added later on said release day as soon as we have confirmed that everything is fine.

See you on the other side. ;)

Here are the full patch notes:

system: prevent excessive config writes on LDAP import
system: do not split XMLRPC password into multiple pieces
system: fix IPv4 /31 assignment address assignment in shell
interfaces: clear PPPoE SLAAC addresses on linkdown
firewall: add live log support for new filterlog format
dhcp: fix processing domain search list on static IPv6
openvpn: fix invalid rules generated by wizard (contributed by kulikov-a)
openvpn: validate tunnel prefix to avoid OpenVPN 2.5 start errors (contributed by kulikov-a)
mvc: catch all errors including syntax and class not found errors
plugins: os-acme-client 2.6[1]
plugins: os-freeradius 1.9.15[2]
plugins: os-haproxy 3.4[3]
plugins: os-zabbix-agent 1.9[4]
ports: curl 7.78.0[5]
ports: filterlog adds CARP IPv6 support and moves label to previously reserved spot
ports: nss 3.68[6]
ports: php 7.4.21[7]
ports: python 3.7.11[8]
ports: syslog-ng 3.33.2[9]
A hotfix release was issued as 21.1.9_1:

firmware: enable upgrade path to 21.7
firmware: add "-q" option for in-place opnsense-bootstrap run
firmware: fix grep call on FreeBSD 13 (contributed by Mariusz Zaborski)
firmware: correct return code on type change in opnsense-update
firmware: fix opnsense-code pull when ABI configuration is no longer there
firmware: fix upgrade with multiple repositories enabled

Stay safe,
Your OPNsense team