From 14d4dfef33623f0c3de3eb901621ac32b56cb51d Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Thu, 4 Jan 2024 14:27:38 +0100
Subject: [PATCH] changelogs

---
 source/CE_releases.rst      |  2 +-
 source/releases/BE_21.4.rst |  2 +-
 source/releases/CE_21.1.rst |  2 +-
 source/releases/CE_23.7.rst | 48 +++++++++++++++++++++++++++++++++++++
 4 files changed, 51 insertions(+), 3 deletions(-)

diff --git a/source/CE_releases.rst b/source/CE_releases.rst
index c5966eb6..26bc922e 100644
--- a/source/CE_releases.rst
+++ b/source/CE_releases.rst
@@ -8,7 +8,7 @@ Community Edition
     :width: 600px
     :align: center
 
-As of January 2015 there have been *270* releases leading to the latest version *23.7.10*
+As of January 2015 there have been *271* releases leading to the latest version *23.7.11*
 named "Restless Roadrunner".
 
 
diff --git a/source/releases/BE_21.4.rst b/source/releases/BE_21.4.rst
index de24c3d4..3609d7b4 100644
--- a/source/releases/BE_21.4.rst
+++ b/source/releases/BE_21.4.rst
@@ -524,7 +524,7 @@ Here are the full patch notes:
 * ports: perl 5.32.1 `[36] <https://perldoc.perl.org/5.32.1/perldelta>`__ 
 * ports: php 7.3.27 `[37] <https://www.php.net/ChangeLog-7.php#7.3.27>`__ 
 * ports: pkg now provides fallback for version mismatch on pkg-add
-* ports: py-netaddr 0.8.0 `[38] <https://pypi.org/project/netaddr/0.8.0/>`__ 
+* ports: py-netaddr 0.8.0 `[38] <https://netaddr.readthedocs.io/en/latest/changes.html#release-0-8-0>`__ 
 * ports: python 3.7.10 `[39] <https://docs.python.org/release/3.7.10/whatsnew/changelog.html>`__ 
 * ports: sqlite 3.34.1 `[40] <https://sqlite.org/releaselog/3_34_1.html>`__ 
 * ports: squid 4.14 `[41] <http://www.squid-cache.org/Versions/v4/squid-4.14-RELEASENOTES.html>`__ 
diff --git a/source/releases/CE_21.1.rst b/source/releases/CE_21.1.rst
index 119f6751..6a9d771b 100644
--- a/source/releases/CE_21.1.rst
+++ b/source/releases/CE_21.1.rst
@@ -733,7 +733,7 @@ Here are the full patch notes against 20.7.8:
 * ports: igmpproxy 0.3 `[10] <https://github.com/pali/igmpproxy/releases/tag/0.3>`__ 
 * ports: nss 3.61 `[11] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_61.html>`__ 
 * ports: openldap 2.4.57 `[12] <https://www.openldap.org/software/release/changes.html>`__ 
-* ports: py-netaddr 0.8.0 `[13] <https://pypi.org/project/netaddr/0.8.0/>`__ 
+* ports: py-netaddr 0.8.0 `[13] <https://netaddr.readthedocs.io/en/latest/changes.html#release-0-8-0>`__ 
 * ports: sudo 1.9.5p2 `[14] <https://www.sudo.ws/stable.html#1.9.5p2>`__ 
 
 The public key for the 21.1 series is:
diff --git a/source/releases/CE_23.7.rst b/source/releases/CE_23.7.rst
index c14c4e58..121c765b 100644
--- a/source/releases/CE_23.7.rst
+++ b/source/releases/CE_23.7.rst
@@ -26,6 +26,54 @@ can be found below as well.
 * Full mirror list: https://opnsense.org/download/
 
 
+--------------------------------------------------------------------------
+23.7.11 (January 04, 2024)
+--------------------------------------------------------------------------
+
+
+The final test phase for 24.1 is starting just as 23.7 strechtes towards
+its inevitable end of life.  At the moment it is unlcear if this release
+will be the last one or not so we shall refrain from stating something that
+may not be true in the coming weeks.  ;)
+
+Of special note is the Python rewrite of the relevant FreeBSD certctl tool
+bits that are needed to register certificates in the system.  It should be
+about 30 times faster now than it was before.
+
+Here are the full patch notes:
+
+* system: implement relevant certctl tool functionality in Python to increase performance
+* system: fix log severity selector (contributed by kulikov-a)
+* system: include IPv6 link-local interface addresses for web GUI and OpenSSH (contributed by Maurice Walker)
+* system: update cron and gateways model
+* interfaces: obey menu group sequence when specified
+* firewall: fix traceback in OpenVPN group alias due to wrong return type
+* firewall: fix missing physical_interface() in shaper template
+* dhcp: cache backend action "interface list macdb" to increase responsiveness
+* dhcp: allow saving with invalid range when IPv4 server is disabled
+* dhcp: do not clobber $range_to / $range_from with the legacy test for lower 64 bit only input
+* firmware: opnsense-update: avoid rewriting .cshrc and .profile files on base set updates
+* firmware: add audit messages for relevant API actions
+* firmware: implement "always reboot" option
+* firmware: add unlocked mode to launcher script
+* firmware: use pluggable package repository scripts
+* lang: assorted language updates
+* network time: prevent the service from listening on a wildcard when selecting specific interfaces (contributed by doktornotor)
+* openvpn: add virtual IPv6 address to widget and status page (contributed by cs-1)
+* openvpn: consider clients missing CARP VHID as disabled
+* unbound: replace JustDomains with Firebog blocklists (contributed by Amy Nagle)
+* unbound: update root hints
+* plugins: os-acme-client 3.20 `[1] <https://github.com/opnsense/plugins/blob/stable/23.7/security/acme-client/pkg-descr>`__ 
+* plugins: os-ddclient 1.19 `[2] <https://github.com/opnsense/plugins/blob/stable/23.7/dns/ddclient/pkg-descr>`__ 
+* plugins: os-wireguard 2.6 `[3] <https://github.com/opnsense/plugins/blob/stable/23.7/net/wireguard/pkg-descr>`__ 
+* ports: curl 8.5.0 `[4] <https://curl.se/changes.html#8_5_0>`__ 
+* ports: nss 3.95 `[5] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_95.html>`__ 
+* ports: php 8.2.14 `[6] <https://www.php.net/ChangeLog-8.php#8.2.14>`__ 
+* ports: py-netaddr 0.10.0 `[7] <https://netaddr.readthedocs.io/en/latest/changes.html#release-0-10-0>`__ 
+* ports: squid 6.6 `[8] <http://www.squid-cache.org/Versions/v6/squid-6.6-RELEASENOTES.html>`__ 
+* ports: sudo 1.9.15p4 `[9] <https://www.sudo.ws/stable.html#1.9.15p4>`__ 
+
+
 --------------------------------------------------------------------------
 23.7.10 (December 12, 2023)
 --------------------------------------------------------------------------