System: Trust - openssl_x509_parse() and friends only evaluate the first certificate found and ignores the rest, which means we should ensure only a single certificate is actually offered for certs and ca's.
This improves the general validation of imported certificates.
PR: GHSA-7wvp-6m2q-953c
firewall: support moving multiple rules in selection order (#11008)
Unify move-before handling in FilterBaseController so filter and NAT
controllers share the same validation and sequence allocation logic.
Accept up to 50 (current step count) comma-separated rule UUIDs, preserve their selection
order using consecutive sequence values, and only shift following rules
when the existing gap is insufficient. Keep filter moves within their
priority group.
Update the firewall rule grids to submit all selected UUIDs and display
their selection order. Add opt-in selection-order indicators and dynamic
command tooltips to UIBootgrid so the move action reflects the current
selection.
Instead of searching the rendered table DOM, the handler now:
Removes indicators through the deselected row components.
Updates every currently selected row through its RowComponent.
Reuses existing indicators while renumbering.
This is virtual-DOM safe and avoids iterating unrelated rows.
ipsec: move ping_hosts.sh to legacy plugin and harden
The script doesn't need to be in core and does not need to be
run by default. Tampering with /tmp/tmpHOSTS without legacy
IPsec running would allow creating the file with a non-root
user which the script would pick up and potentially evaluate.
The fix for ping_hosts.sh will be in the matching plugins commit.
Reported by: Adam Korczynski of Ada Logics using Anrophic
Try at refactoring the logic, we want to preserve the sequence in which the rules have been selected, otherwise sortBy does not guarantee a user expected order
