Howdy,

Important security updates inside. Also: happy holidays!

Here are the full patch notes:

- reporting: fix traffic graph widget link issue
- system: simplify log format parsing
- interfaces: fix DUID LL description (contributed by Gabriel Mazzocato)
- unbound: fix dnsbl not reloading after update
- plugins: os-acme-client 2.2[1]
- plugins: os-freeradius 1.9.9[2]
- plugins: os-frr 1.20[3]
- plugins: os-tinc 1.6 enables multiple addresses per host (contributed by ElNounch)
- plugins: os-wireguard 1.4[4]
- ports: curl 7.74.0[5]
- ports: dhcp6c ignores advertise messages with none of requested data and missed status codes
- ports: libressl 3.1.5[6]
- ports: lighttpd 1.4.56[7]
- ports: nss 3.60[8]
- ports: openssl 1.1.1i[9]
- ports: pcre2 10.36[10]
- ports: sudo 1.9.4[11]
- ports: sqlite 3.34.0[12]
- ports: unbound 1.13.0[13]

A hotfix release was issued as 20.7.7_1:

- system: disable TLS on plain HTTP redirect for new lighttpd version
- ports: unbound fix for segmentation fault (restart service to activate)
- ports: lighttpd 1.4.58[14]

Stay safe and healthy,
Your OPNsense team