OPNsense 22.1-RC2 released

[franco]

Hi there,

Quick update on the 22.1 front includes feedback from the RC1 release,
a FreeBSD package tool fix for its static binary failing to validate
certain TLS certificates and a number of small improvements that do not
fit into the former categories.

The 22.1 release is scheduled for January 27 which is next week already.  ;)

Here are the full patch notes:

o system: use correct IPv6 interface for dpinger gateway monitoring when using 6RD
o system: remove spurious XML validation that cannot cope with attributes from backup restore
o system: sync recovery utility contents with FreeBSD 13
o system: fix new PPP CARP hook function call (contributed by Markus Reiter)
o system: allow additional search domain (Pierre Fevre)
o system: fix general settings PHP warnings that only appear when validation fails
o system: move multiple sysctl manipulations to tunables framework to allow overriding them
o system: prevent more than one default route by default
o system: prevent syslog-ng from crashing after update due to "syslog-ng-ctl reload" use
o system: MSDOS file system awareness in information widget for new /boot/efi partition
o system: separate core and thread count in information widget
o system: refactor GUI rebind protection and remove its os-dyndns/os-rfc2136 references
o reporting: fix display of total in/out traffic values
o interfaces: improve validations and fix defaults for bridges
o interfaces: remove defunct link support for GRE
o interfaces: align GIF configuration with base system options
o interfaces: allow bridges to attach to VXLAN on boot
o interfaces: repair get_interface_list() for console use
o interfaces: improve LAGG/VLAN assignments via console option
o firewall: plain log default logging severity selection is now "informational"
o firewall: improve maximum shaper value validation and add Gbit/s support
o dhcp: rework router advertisement "static" mode flags to separate advanced options
o dnsmasq: no-hosts option (contributed by agh1467)
o firmware: opnsense-update: exclude /boot/efi permission reset from base set extract
o intrusion detection: prevent config migration from crashing
o intrusion detection: update to ET-Open to version 6
o network time: detach "limited" from "kod" option (contributed by Zsolt Zsiros)
o network time: remove PID file use as it can be unreliable
o mvc: fix logging of configd errors
o mvc: Add BlankDesc to ModelRelationField (contributed by agh1467)
o ui: move storing jQuery Bootgrid settings in browser from core to bootgrid (contributed by Manuel Faux)
o plugins: os-ddclient 1.0 as an eventual replacement for os-dyndns
o plugins: os-dyndns adds local copy of get_dyndns_ip()
o plugins: os-freeradius 1.9.18[1]
o plugins: os-nginx 1.26[2]
o plugins: os-rfc2136 adds local copy of get_dyndns_ip()
o plugins: os-wol adds cron support for wake action (contributed by digitalshow)
o src: revert upstream permission change for /root directory
o src: fix kernel build creating wrong linkers.hint file
o ports: hostapd 2.10[3]
o ports: nss 3.74[4]
o ports: pecl-psr 1.2.0[5]
o ports: pkg fixes validation failures on HTTPS fetch in static binary[6]
o ports: sqlite 3.37.2[7]
o ports: syslog-ng 3.35.1[8]
o ports: wpa_supplicant 2.10[9]


Stay safe,
Your OPNsense team

--
[1] https://github.com/opnsense/plugins/blob/stable/22.1/net/freeradius/pkg-descr
[2] https://github.com/opnsense/plugins/blob/stable/22.1/www/nginx/pkg-descr
[3] https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog
[4] https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.74_release_notes
[5] https://pecl.php.net/package-changelog.php?package=psr&release=1.2.0
[6] https://cgit.freebsd.org/ports/commit/?id=08342c9812d
[7] https://sqlite.org/releaselog/3_37_2.html
[8] https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.35.1
[9] https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog