• system: close boot file after probing to avoid lock inheritance
  • system: fix lock() inheriting the lock state
  • system: give more context in process kill error case since we operate PID numbers only
  • firewall: groups were not correctly parsed for menu post-migration
  • firewall: hide row command buttons for internal groups
  • firewall: add “ipv6-icmp” to protocol list in shaper
  • firewall: fix PHP warnings on the rules pages
  • dhcp: check if manufacturer exists for IPv4 lease page to prevent error
  • dhcp: use base16 for iaid_duid decode for IPv6 lease page to prevent error
  • dhcp: fix validation for static entry requirement
  • firmware: revoke 23.1 fingerprint
  • network time: support pool directive and maxclock (contributed by Kevin Fason)
  • openvpn: fix static key delete
  • openvpn: fix “mode” typo and push auth “digest” into export config
  • openvpn: fix race condition when using CRLs in instances
  • openvpn: remove arbitrary upper bounds on some integer values in instances
  • unbound: migration of empty nodes failed from 23.1.11 to 23.7
  • unbound: fix regression when disabling first domain override
  • mvc: fix empty item selection issue in BaseListField
  • plugins: os-ddclient 1.14
  • plugins: os-acme-client 3.19
  • src: bhyve: fully reset the fwctl state machine if the guest requests a reset
  • src: frag6: avoid a possible integer overflow in fragment handling
  • src: amdtemp: Fix missing 49 degree offset on current EPYC CPUs
  • src: libpfctl: ensure the initial allocation is large enough
  • src: pf: handle multiple IPv6 fragment headers
  • ports: curl 8.2.1
  • ports: nss 3.92
  • ports: openssl 1.1.1v
  • ports: perl 5.34.1
  • ports: py-dnspython 2.4.1
  • ports: strongswan 5.9.11
  • ports: syslog-ng 4.3.1