A fantastic day to you all,

This updates provides for a new GeoIP database source by IPinfo, stability fixes for several network drivers and the recent OpenSSL security update amongst others.

Here are the full patch notes:

- system: add the pfsync "defer" option to high availability
- system: return both interfaces in a single call for get_nameservers()
- system: safeguard legacy local_sync_accounts() against malformed user entries
- firewall: support IPinfo format for GeoIP[1]
- firewall: adapt default table size calculation
- firewall: fix flags not showing on GeoIP selection
- captive portal: case insensitive MAC parsing
- captive portal: remove stale dir-listing.activate from web server
- dnsmasq: refine the selection of automatic DHCP rules for eligible interfaces
- firmware: switch business mirror layout
- ipsec: dots are not allowed in pool names
- kea-dhcp: expose lease expiration settings to the GUI (contributed by Konstantinos Spartalis)
- kea-dhcp: support DHCP option 121 (classless static routes)
- mvc: protect JSON response against UFT-8 encoding failures
- mvc: HTML-decode select element values
- plugins: os-etpro-telemetry 1.8 now shows more status responses in widget
- plugins: os-shadowsocks 1.3[2]
- src: bnxt: fix the request length in bnxt_hwrm_func_backing_store_cfg()
- src: iflib: set the get counter routine prior to attaching the interface
- src: ifnet: defer detaching address family dependent data
- src: ixgbe: fix incomplete speed coverage in link status logging
- src: ixl: fix queue MSI and legacy IRQ rearming
- src: openssl: fix multiple vulnerabilities[3]
- src: re: add PNP info for module
- src: re: make sure re_rxeof() is called in net epoch context
- src: vfs: fix copy_file_range() failing to set output parameters[4]
- ports: curl 8.16.0[5]
- ports: expat 2.7.3[6]
- ports: nss 3.117[7]
- ports: openssl 3.0.18[8]
- ports: pcre2 10.46[9]
- ports: phpseclib 3.0.47[10]

Stay safe,
Your OPNsense team