OPNsense business edition 22.4.3 released

[franco]

This business release is based on the OPNsense 22.1.10 community version
with additional reliability improvements.

Here are the full patch notes:

o system: properly shut down removed interfaces in console port assignment
o system: log hard limit results in 9999 entries for grid output
o system: move add_user script out of shell scripts
o system: disable flag was not removing static route
o system: fix RADIUS config validation for port requirement (contributed by Josh Soref)
o system: properly cleanse user input in Monit dashboard widget
o system: flush all core Python pyc files on updates
o system: apply default firewall policy before interface configuration
o interfaces: move lo0 interface registration to loopback
o interfaces: simplify bridge destroy on deletion
o interfaces: add missing scope to link-local GIF host route
o interfaces: fix "Allow service binding" for multiple aliases per interface (contributed by Adam Dawidowski)
o firewall: ignore age/expire when not provided or empty in sessions page
o firewall: internal aliases cannot be disabled
o firmware: update repository silently on remote list if needed
o intrusion detection: remove dead link to McAfee rule references
o ipsec: move vici library from core to ports
o unbound: prevent crash of DHCP lease watcher due to unhandled CalledProcessError exception
o backend: except configparser read (contributed by agh1467)
o mvc: AutoNumberField: set minimum value to 1
o mvc: IntegerFieldType: fix for negative numbers (contributed by xbb)
o mvc: fix two regressions in BaseField for Phalcon 5
o mvc: fix rowCount when all is selected in searchRecordsetBase()
o plugins: os-ddclient 1.8[1]
o plugins: os-firewall 1.2 fixes internal backup restore
o plugins: os-postfix 1.23[2]
o plugins: os-stunnel 1.0.5 adds intermediates to server chain (contributed by Johnny S. Lee)
o plugins: os-telegraf 1.12.5[3]
o ports: nss 3.80[4]
o ports: py-vici 5.9.3
o ports: python 3.9.13[5]
o ports: sudo 1.9.11p3[6]
o ports: syslog-ng 3.37.1[7]
o ports: unbound 1.16.2[8]


Stay safe,
Your OPNsense team

--
[1] https://github.com/opnsense/plugins/blob/stable/22.1/dns/ddclient/pkg-descr
[2] https://github.com/opnsense/plugins/blob/stable/22.1/mail/postfix/pkg-descr
[3] https://github.com/opnsense/plugins/blob/stable/22.1/net-mgmt/telegraf/pkg-descr
[4] https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.80_release_notes
[5] https://docs.python.org/release/3.9.13/whatsnew/changelog.html
[6] https://www.sudo.ws/stable.html#1.9.11p3
[7] https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1
[8] https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

[franco]

A hotfix release was issued as 22.4.3_1:

o interfaces: fix get_interface_mac() not returning a cached MAC address