14
OPNsense 23.7.1 released
(forum.opnsense.org)
- system: close boot file after probing to avoid lock inheritance
- system: fix lock() inheriting the lock state
- system: give more context in process kill error case since we operate PID numbers only
- firewall: groups were not correctly parsed for menu post-migration
- firewall: hide row command buttons for internal groups
- firewall: add "ipv6-icmp" to protocol list in shaper
- firewall: fix PHP warnings on the rules pages
- dhcp: check if manufacturer exists for IPv4 lease page to prevent error
- dhcp: use base16 for iaid_duid decode for IPv6 lease page to prevent error
- dhcp: fix validation for static entry requirement
- firmware: revoke 23.1 fingerprint
- network time: support pool directive and maxclock (contributed by Kevin Fason)
- openvpn: fix static key delete
- openvpn: fix "mode" typo and push auth "digest" into export config
- openvpn: fix race condition when using CRLs in instances
- openvpn: remove arbitrary upper bounds on some integer values in instances
- unbound: migration of empty nodes failed from 23.1.11 to 23.7
- unbound: fix regression when disabling first domain override
- mvc: fix empty item selection issue in BaseListField
- plugins: os-ddclient 1.14
- plugins: os-acme-client 3.19
- src: bhyve: fully reset the fwctl state machine if the guest requests a reset
- src: frag6: avoid a possible integer overflow in fragment handling
- src: amdtemp: Fix missing 49 degree offset on current EPYC CPUs
- src: libpfctl: ensure the initial allocation is large enough
- src: pf: handle multiple IPv6 fragment headers
- ports: curl 8.2.1
- ports: nss 3.92
- ports: openssl 1.1.1v
- ports: perl 5.34.1
- ports: py-dnspython 2.4.1
- ports: strongswan 5.9.11
- ports: syslog-ng 4.3.1
