Hi there,A small update ships several improvements and preparations for the upcoming version 18.7. We are also shipping a patch for the lazy FPU state restore information disclosure.Here are the full patch notes:o system: enforce full password policy check for local passwords including TOTPo system: add RFC 7919 DH parameter files for upcoming 18.7 featureo system: add 3072-bit RSA key length options to certificates (contributed by Justin Coffman)o system: move auto-cron jobs to plugin fileso interfaces: refactor reload handling around interfaces_configure()o interfaces: allow private addresses in 6RDo interfaces: check existence of "status" (contributed by Tian Yunhao)o reporting: add NetFlow/Insight database force repair functiono dhcp: update from ISC version 4.3 to 4.4o importer: allow ZFS import for upcoming 18.7 ZFS installer featureo importer: allow import from simple MSDOS USB driveso intrusion detection: add app detect rules (contributed by Michael Muenz)o rc: suppress message of service not enabled on NetFlow backupo rc: use exec in /etc/rc and /etc/rc.shutdown hookso rc: rework rc.syshook facility to be driven by directories and not suffixeso unbound: remove defunct unbound_statistics() functiono plugins: os-postfix 1.4 advanced force recipient check (contributed by Michael Muenz)o plugins: service start corrections for accompanying rc.syshook changeso src: incorrect TLB shootdown for Xen-based guests[1]o src: lazy FPU state restore information disclosure[2]o src: enable usage of locate(1) utilityo ports: isc-dhcp 4.4.1[3]o ports: php 7.1.19[4]o ports: unbound 1.7.3[5]Stay safe,Your OPNsense team--[1] https://www.freebsd.org/security/advisories/FreeBSD-EN-18:07.pmap.asc [2] https://www.freebsd.org/security/advisories/FreeBSD-SA-18:07.lazyfpu.asc [3] https://deepthought.isc.org/article/AA-01571 [4] http://php.net/ChangeLog-7.php#7.1.19 [5] http://www.unbound.net/download.html