:: c0urier.net

August 9, 2022

Dear all,

This update first and foremost addresses reported regressions with the
initial version and the required security update for Unbound.  Expect
follow-up releases to be a bit more noisy as we are going to introduce
the new notification system and further IPv6 improvements plus new roadmap
items to be announced in the upcoming weeks.

Here are the full patch notes:

o system: fix regression in config backup due to timestamp key rename
o system: fix assorted warnings generated by PHP 8
o system: do not reload Unbound/Dnsmasq hosts configuration by default
o system: use proper CRL id-ce-cRLReasons extension keyword ‘unspecified’
o system: properly cleanse user input in Monit dashboard widget
o system: remove dead code from login form
o interfaces: fix get_interface_mac() not returning a cached MAC address
o interfaces: hide nonexistent MAC info on wireless edit page
o interfaces: stop DHCP from calling rc.newwanip when no changes are being done
o interfaces: bring routes back unconditionally after reconfiguring 6to4/6rd IPv6 connectivity
o interfaces: GIF/GRE IPv6 default remote network size selection is now “128” instead of “64”
o dhcp: do not advertise DNS domain when DNS router advertisements are disabled (contributed by Patrick M. Hausen)
o unbound: do not start DHCP watcher immediately after daemonizing Unbound itself
o lang: fix reported issues with Italian and French translations
o plugins: os-acme-client 3.12[1]
o plugins: os-freeradius 1.9.20[2]
o plugins: os-git-backup fixes git binary variable use
o plugins: os-haproxy fixes deprecation notes in PHP 8 (contributed by Gavin Chappell)
o plugins: os-maltrail 1.9[3]
o plugins: os-munin-node 1.1[4]
o plugins: os-netdata 1.2[5]
o plugins: os-nginx 1.29[6]
o ports: libxml 2.9.14[7]
o ports: nss 3.81[8]
o ports: rrdtool 1.8.0[9]
o ports: unbound 1.16.2[10]

Stay safe,
Your OPNsense team

—
[1] https://github.com/opnsense/plugins/blob/stable/22.7/security/acme-client/pkg-descr
[2] https://github.com/opnsense/plugins/blob/stable/22.7/net/freeradius/pkg-descr
[3] https://github.com/opnsense/plugins/blob/stable/22.7/security/maltrail/pkg-descr
[4] https://github.com/opnsense/plugins/blob/stable/22.7/sysutils/munin-node/pkg-descr
[5] https://github.com/opnsense/plugins/blob/stable/22.7/net-mgmt/netdata/pkg-descr
[6] https://github.com/opnsense/plugins/blob/stable/22.7/www/nginx/pkg-descr
[7] http://www.xmlsoft.org/news.html
[8] https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.81_release_notes
[9] https://github.com/oetiker/rrdtool-1.x/blob/master/CHANGES
[10] https://nlnetlabs.nl/projects/unbound/download/#unbound-1-6-2