New OPNsense Release

OPNsense Business Edition 22.4.2 released

July 7, 2022
This business release is based on the OPNsense 22.1.9 community version
with additional reliability improvements.

Here are the full patch notes:

o system: support plugin device reconfiguration in pluginctl utility
o system: use password_verify() in authenticators (contributed by oittaa)
o system: hide password from command line during config encryption
o system: improve gateway subnet validation to fix IPv6 edge cases
o system: dpinger support for IPv6 aliases
o system: support 1500000 baudrate selection for ARM
o system: non-functional cleanups for upcoming move to PHP 8
o system: fix firmware command shortcut in opnsense-shell utility
o system: if no temperature sysctls are exposed do nothing
o interfaces: add unique constraint for tag+if on VLANs
o firewall: bring back missing toggle button in aliases
o firewall: exclude internal aliases on import
o firewall: fix alias removal
o firewall: various usability and visibility improvements for aliases
o firewall: performance improvement for large numbers of port type aliases
o firewall: simplify sort and add natural sorting in alias diagnostics
o captive portal: add extendedPreAuthData for MAC address retrieval during authentication
o captive portal: add missing validation message for empty interface selection
o dhcp: refactor IPv4 lease removal and purge static leases before starting service
o dhcp: revert back to not adding an IP to static lease creation from leases page
o dhcp: allow custom configuration from directories
o firmware: add python version to crash report header
o opendns: update OpenDNS IPv6 servers (contributed by Johan Rylander)
o openvpn: add domain search option to servers and overrides
o unbound: add custom "destination address" as advanced option for blocklists
o unbound: disabling the first DNS override entry invalidates config
o unbound: make blocklist additions/removals dynamic to prevent a restart
o unbound: zero_ttl is no longer a valid statistic (contributed by David Mora)
o mvc: distinct between HTTP errors 401 and 403 during authentication
o mvc: call microtime(true) only once during config save (contributed by csbyte)
o plugins: os-acme-client 3.11[1]
o plugins: os-ddclient 1.7[2]
o plugins: os-debug 1.5 fixes deprecated xdebug syntax
o plugins: os-frr 1.29[3]
o plugins: os-nginx 1.28[4]
o plugins: os-postfix 1.22[5]
o plugins: os-wireguard 1.11[6]
o src: pf: fix memory leaks in nvlist usage
o src: pf: stop resolving hosts as dns that use ":" modifier
o src: e1000: Increase rx_buffer_size to 32b
o src: igc: Increase rx_buffer_size local variable to 32b
o src: assorted non-functional cleanups and typo corrections
o ports: curl 7.84.0[7]
o ports: krb5 1.20[8]
o ports: lighttpd 1.4.65[9]
o ports: nss 3.79[10]
o ports: openssl 1.1.1q[11]
o ports: openvpn 2.5.7[12]
o ports: php 7.4.30[13]
o ports: py-certifi 2022.5.18.1
o ports: sqlite3 3.38.5[14]
o ports: strongswan 5.9.6[15]
o ports: sudo 1.9.11p2[16]
o ports: unbound 1.16.0[17]

Stay safe,
Your OPNsense team