release notes

source/CE_releases.rst

@@ -8,7 +8,7 @@ Community Edition
     :width: 600px
     :align: center
 
-As of January 2015 there have been *260* releases leading to the latest version *23.7*
+As of January 2015 there have been *261* releases leading to the latest version *23.7.1*
 named "Restless Roadrunner".
 
 

source/releases/CE_23.7.rst

@@ -26,6 +26,60 @@ can be found below as well.
 * Full mirror list: https://opnsense.org/download/
 
 
+--------------------------------------------------------------------------
+23.7.1 (August 08, 2023)
+--------------------------------------------------------------------------
+
+
+23.7 looks pretty good so far but no reason not to make it better.
+The MVC changes for DHCP, firewall groups, OpenVPN and Unbound receive
+several required fixes and the latest FreeBSD security advisories were
+added as well.
+
+Here are the full patch notes:
+
+* system: close boot file after probing to avoid lock inheritance
+* system: fix lock() inheriting the lock state
+* system: give more context in process kill error case since we operate PID numbers only
+* firewall: groups were not correctly parsed for menu post-migration
+* firewall: hide row command buttons for internal groups
+* firewall: add "ipv6-icmp" to protocol list in shaper
+* firewall: fix PHP warnings on the rules pages
+* dhcp: check if manufacturer exists for IPv4 lease page to prevent error
+* dhcp: use base16 for iaid_duid decode for IPv6 lease page to prevent error
+* dhcp: fix validation for static entry requirement
+* firmware: revoke 23.1 fingerprint
+* network time: support pool directive and maxclock (contributed by Kevin Fason)
+* openvpn: fix static key delete
+* openvpn: fix "mode" typo and push auth "digest" into export config
+* openvpn: fix race condition when using CRLs in instances
+* openvpn: remove arbitrary upper bounds on some integer values in instances
+* unbound: migration of empty nodes failed from 23.1.11 to 23.7
+* unbound: fix regression when disabling first domain override
+* mvc: fix empty item selection issue in BaseListField
+* plugins: os-ddclient 1.14 `[1] <https://github.com/opnsense/plugins/blob/stable/23.7/dns/ddclient/pkg-descr>`__ 
+* plugins: os-acme-client 3.19 `[2] <https://github.com/opnsense/plugins/blob/stable/23.7/security/acme-client/pkg-descr>`__ 
+* src: bhyve: fully reset the fwctl state machine if the guest requests a reset `[3] <FREEBSD:FreeBSD-SA-23:07.bhyve>`__ 
+* src: frag6: avoid a possible integer overflow in fragment handling `[4] <FREEBSD:FreeBSD-SA-23:06.ipv6>`__ 
+* src: amdtemp: Fix missing 49 degree offset on current EPYC CPUs
+* src: libpfctl: ensure the initial allocation is large enough
+* src: pf: handle multiple IPv6 fragment headers
+* ports: curl 8.2.1 `[5] <https://curl.se/changes.html#8_2_1>`__ 
+* ports: nss 3.92 `[6] <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_92.html>`__ 
+* ports: openssl 1.1.1v `[7] <https://www.openssl.org/news/openssl-1.1.1-notes.html>`__ 
+* ports: perl 5.34.1 `[8] <https://perldoc.perl.org/5.34.1/perldelta>`__ 
+* ports: py-dnspython 2.4.1
+* ports: strongswan 5.9.11 `[9] <https://github.com/strongswan/strongswan/releases/tag/5.9.11>`__ 
+* ports: syslog-ng 4.3.1 `[10] <https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.3.1>`__ 
+
+A hotfix release was issued as 23.7.1_3:
+
+* firewall: do not clone "associated-rule-id"
+* network time: fix "Soliciting pool server" regression (contributed by Allan Que)
+* dhcp: fix IPv4 lease removal
+
+
+
 --------------------------------------------------------------------------
 23.7 (July 31, 2023)
 --------------------------------------------------------------------------