A fantastic day to you all,

This updates provides for a new GeoIP database source by IPinfo, stability fixes for several network drivers and the recent OpenSSL security update amongst others.

Here are the full patch notes:

• system: add the pfsync "defer" option to high availability
• system: return both interfaces in a single call for get_nameservers()
• system: safeguard legacy local_sync_accounts() against malformed user entries
• firewall: support IPinfo format for GeoIP[1]
• firewall: adapt default table size calculation
• firewall: fix flags not showing on GeoIP selection
• captive portal: case insensitive MAC parsing
• captive portal: remove stale dir-listing.activate from web server
• dnsmasq: refine the selection of automatic DHCP rules for eligible interfaces
• firmware: switch business mirror layout
• ipsec: dots are not allowed in pool names
• kea-dhcp: expose lease expiration settings to the GUI (contributed by Konstantinos Spartalis)
• kea-dhcp: support DHCP option 121 (classless static routes)
• mvc: protect JSON response against UFT-8 encoding failures
• mvc: HTML-decode select element values
• plugins: os-etpro-telemetry 1.8 now shows more status responses in widget
• plugins: os-shadowsocks 1.3[2]
• src: bnxt: fix the request length in bnxt_hwrm_func_backing_store_cfg()
• src: iflib: set the get counter routine prior to attaching the interface
• src: ifnet: defer detaching address family dependent data
• src: ixgbe: fix incomplete speed coverage in link status logging
• src: ixl: fix queue MSI and legacy IRQ rearming
• src: openssl: fix multiple vulnerabilities[3]
• src: re: add PNP info for module
• src: re: make sure re_rxeof() is called in net epoch context
• src: vfs: fix copy_file_range() failing to set output parameters[4]
• ports: curl 8.16.0[5]
• ports: expat 2.7.3[6]
• ports: nss 3.117[7]
• ports: openssl 3.0.18[8]
• ports: pcre2 10.46[9]
• ports: phpseclib 3.0.47[10]

Stay safe,
Your OPNsense team