Dear all,

20.7-RC1 is already available and the final release of 20.7 is scheduled for July 30. A hotfix release for 20.1.9 will enable the upgrade path some hours after the initial 20.7 announcement is out, but please note that updated 32-bit builds (also known as i386) will no longer be available from this day forward.

Here are the full patch notes:

- system: Windows-friendly Nextcloud configuration backup file timestamp (contributed by Alphakilo)
- firewall: validate if NAT destination contains a port
- firewall: prevent config_read_array() from adding an empty lo0
- network time: NMEA GPS clock messages latitude and longitude parsing fix (contributed by mikahe)
- network time: prevent widget PHP warnings if no GPS fix was returned in NMEA message (contributed by mikahe)
- mvc: LegacyLinkField not allowed to return null in __toString()
- plugins: os-collectd 1.3[1]
- plugins: os-dyndns 1.22[2]
- plugins: os-telegraf 1.8.1[3]
- plugins: os-theme-rebellion 1.8.6 (contributed by Team Rebellion)
- plugins: os-tinc fixes switch mode[4]
- plugins: os-wireguard 1.2[5]
- ports: ca_root_nss 3.54
- ports: curl 7.71.1[6]
- ports: dnsmasq 2.82[7]
- ports: monit 5.27.0[8]
- ports: php 7.3.20[9]
- ports: python 3.7.8[10]
- ports: sqlite 3.32.3[11]
- ports: syslog-ng 3.27.1[12]

A hotfix release was issued as 20.1.9_1:

- firmware: enable upgrade path to 20.7 (amd64 only)

Stay safe,
Your OPNsense team