Hello there,

This will be the end of life release for the 22.7 series with only a small number of reliability updates. Upgrades to 23.1-RC1 are possible from the development version of this release. We do expect an online update for RC2 next week.

The final 23.1 release will be on January 26. As always the upgrade path from the community version will be added as a hotfix shortly after the final release announcement is published. However, this time around LibreSSL will no longer update and must be switched to the OpenSSL flavour prior to the upgrade.

Here are the full patch notes:

- system: fix a few minor Coverity Scan reports in Python code[1]
- firewall: show automated "port 0" rule as actual port "0" on PHP 8
- reporting: fix incompatible regex syntax in FreeBSD 13.1 for firewall state health statistics
- unbound: safeguard retrieval of blocklist shortcode
- mvc: fix IntegerField minimum value (contributed by xbb)
- plugins: os-acme-client 3.15[2]
- plugins: os-stunnel fixes missing include in certificate script
- ports: curl 7.87.0[3]
- ports: nss 3.87[4]
- ports: pcre 10.42[5]
- ports: phalcon 5.1.4[6]
- ports: php 8.0.27[7]
- ports: sqlite 3.40.1[8]
- ports: strongswan 5.9.9[9]
- ports: unbound 1.17.1[10]

A hotfix release was issued as 22.7.11_1:

- firmware: enable upgrade path to 23.1 (OpenSSL only)

Stay safe,
Your OPNsense team