kospos

• system: close boot file after probing to avoid lock inheritance
• system: fix lock() inheriting the lock state
• system: give more context in process kill error case since we operate PID numbers only
• firewall: groups were not correctly parsed for menu post-migration
• firewall: hide row command buttons for internal groups
• firewall: add "ipv6-icmp" to protocol list in shaper
• firewall: fix PHP warnings on the rules pages
• dhcp: check if manufacturer exists for IPv4 lease page to prevent error
• dhcp: use base16 for iaid_duid decode for IPv6 lease page to prevent error
• dhcp: fix validation for static entry requirement
• firmware: revoke 23.1 fingerprint
• network time: support pool directive and maxclock (contributed by Kevin Fason)
• openvpn: fix static key delete
• openvpn: fix "mode" typo and push auth "digest" into export config
• openvpn: fix race condition when using CRLs in instances
• openvpn: remove arbitrary upper bounds on some integer values in instances
• unbound: migration of empty nodes failed from 23.1.11 to 23.7
• unbound: fix regression when disabling first domain override
• mvc: fix empty item selection issue in BaseListField
• plugins: os-ddclient 1.14
• plugins: os-acme-client 3.19
• src: bhyve: fully reset the fwctl state machine if the guest requests a reset
• src: frag6: avoid a possible integer overflow in fragment handling
• src: amdtemp: Fix missing 49 degree offset on current EPYC CPUs
• src: libpfctl: ensure the initial allocation is large enough
• src: pf: handle multiple IPv6 fragment headers
• ports: curl 8.2.1
• ports: nss 3.92
• ports: openssl 1.1.1v
• ports: perl 5.34.1
• ports: py-dnspython 2.4.1
• ports: strongswan 5.9.11
• ports: syslog-ng 4.3.1

Update went smoothly as can be. A reboot is required.