# 2.4.4-p3

2.4.4 Maintenance release

* Feature #8602: DNS over TLS host verification
* Bug #8970: Queues Menu item ends with ":"
* Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
* Feature #9096: Login Page:  Make pfSense Login Page Tab Name More Unique
* Bug #9193: firewall_nat.php: PHP error deleting an imported NAT rule with no firewall rules present
* Bug #9207: Phase1s created before pfSense 2.1.0 no longer work after upgrade to 2.4.3: IPsec ERROR: Could not find phase 1 source for connection [redacted]. Omitting from configuration file.
* Bug #9214: Packages fail to reinstall after restoring config.xml from the installer
* Bug #9223: SSHGUARD doesn't work as expected
* Bug #9231: firewall_aliases_edit.php: pf keyword matching is not catching some problem cases
* Bug #9239: WebGUI: Diagnostics > Packet Capture will try to display any size of pcap file.
* Bug #9276: DNS troubleshooting tool incorrectly reporting "ai." as an invalid hostname
* Bug #9264: Disabling "IPv6 over IPv4 Tunneling" breaks config
* Bug #9275: ip tools link not working
* Bug #9281: ZFS encrypted+mirrored swap may not be activated on 2.4.4-p2
* Bug #9283: Not obvious that HA sync will still sync certs if cert sync disabled but OpenVPN sync enabled
* Feature #9290: Need a way to suppress status output display in /status.php
* Bug #9294: XSS issues on multiple pages
* Bug #9409: Crash dumps cannot be saved when RAM disks are enabled for /var
* Bug #9308: Missing countries from list used on certificate pages
* Bug #9313: PHP Fatal error:  Uncaught Error: Call to a member function addGlobal() on null in /usr/local/www/firewall_shaper_vinterface.php:415
* Bug #9316: diag_backup.php: Parse error: syntax error, unexpected ';' in /usr/local/www/diag_backup.php on line 333
* Bug #9317: Warning/crash when adding a new user and choosing to generate a certificate
* Bug #9359: diag_tables.php duplicate entries from  webConfigurator lockout table
* Bug #9390: diag_backup.php: Backup output generation failure with CSRF script tag inserted into XML
* Bug #9446: Filter reload error with NAT reflection enabled
* Bug #9470: unbound remotecontrol.conf not rewritten when the file is empty
* Bug #9499: Potential XSS in status_filter_reload.php via NAT rule description
* Bug #9507: Potential XSS in WOL widget (widgets/widgets/wage_on_lan_widget.php) via WOL entry description
* Bug #9508: Potential XSS in services_acb.php via download parameter
* Todo #9511: OpenVPN server/client/override advanced settings privilege separation
* Bug #9512: Privilege bypass due to match style used by widget privileges
* Bug #9513: Privilege bypass due to relative paths in URL after initial page filename
* Bug #9519: Fix ACB Privileges