2.1.2 New Features and Changes

pfSense® software version 2.1.2 follows very shortly after 2.1.1 and is primarily a security release. Refer to the 2.1.1 release notes for changes from 2.1 to 2.1.1.

Security Fixes

The Heartbleed OpenSSL bug and another OpenSSL bug were both covered by the following security announcements:

• pfSense-SA-14_04.openssl

  • FreeBSD-SA-14:06.openssl

  • CVE-2014-0160 (Heartbleed)

  • CVE-2014-0076 (ECDSA Flaw)

Packages also had their own independent fixes and need updating. During the firmware update process the packages will be reinstalled properly. Otherwise, uninstall and then reinstall packages to ensure that the latest version of the binaries is in use.

Other Fixes

• On packages that use row_helper, when user clicks on add or delete button the page scrolls to top. #3569

• Correct typo on function name in Captive Portal bandwidth allocation

• Make extra sure that the firewall does not start multiple instances of dhcpleases if, for example, the PID is stale/invalid and there is still a running instance.

• Fix CRL editing. Use an alphanumeric test rather than purely is_numericint because the ID is generated by uniqid and is not purely numeric. #3591