WPA2 KRACK

World's Most Trusted Open-Source Firewall, pfSense, Patched Against WPA2 KRACK
Netgate's Jim Pingle announced the immediate availability of the first point release to the latest pfSense 2.4 series of world's most trusted open source firewall.

Released two weeks ago, pfSense 2.4 is a major update to the BSD-based firewall software that introduces an all-new installer based on bsdinstall with built-in ZFS support, revamped Captive Portal to work without multiple instances of the IPFW stateful firewall, support for UEFI machines, as well as support for multiple types of partition layouts like GPT and BIOS.

pfSense 2.4 also introduces support for Netgate ARM devices, such as SG-1000, support for OpenVPN 2.4, Negotiable Crypto Parameters (NCP), dual stack/multihome, and numerous other improvements. Now, the first point release, pfSense 2.4.1, is already out to patch the system against the infamous WPA2 KRACK (Key Reinstallation Attack) security vulnerability.

"Security advisories from upstream projects announced after pfSense 2.4.0-RELEASE made this additional release necessary, soon after 2.4.0, to keep firewalls safe and secure," said Jim Pingle. "We used this opportunity to also include some platform fixes for new hardware we are offering and to deliver important stability fixes for issues that some users encountered with pfSense 2.4.0-RELEASE."

Here's what's new in pfSense 2.4.1
Other changes included in the pfSense 2.4.1 software update are support for mounting disks read-only before running the fsck command in preen mode, support for using FreeBSD's "dotted" format for VLAN interface names, which addresses the 4 digit VLAN problem with NIC names that are longer than 6 bytes, as well as to fix a known issue related to VLAN's name length.

Moreover, it's now possible to set the VLAN Priority in VLAN's interface configuration, there's better boot support for VMware platforms, especially ESXi 6.5.0U1, and fixes for several other issues related to the bsnmpd daemon and the upgrade process on older installs. pfSense 2.4.1 is available for download right now on our website, and it's a recommended update for all users.