Re: OPNsense 26.10 business edition released

Fri, 13 Nov 2026 08:19:54 GMT

Here are the full patch notes for patch release 1:

o system: ensure that only a single certificate is accepted during save[51] (contributed by Mason Jones)
o system: use standard throwReadOnly() on notification dismiss action[52] (reported by Janik Bes...

Read more

Re: OPNsense 26.7.9 released

Thu, 12 Nov 2026 19:30:05 GMT

A hotfix release was issued as 26.7.9_1:

o system: fix automation user scope set since validation was tightened

Read more

OPNsense 26.7.9 released

Wed, 11 Nov 2026 14:36:45 GMT

Hey there,

The 26.7 series gets another installment with a few nice feature additions
and UX revamps!  There are 4 new security advisories on GitHub for the
core as well as numerous fixes throughout the components as they are being
reported.  Of specia...

Read more

Re: OPNsense 26.7.8 released

Sat, 31 Oct 2026 07:31:01 GMT

A hotfix release was issued as 26.7.8_2:

o system: revert "allow a single dynamic interface gateway to work for both IPv4 and IPv6"
o system: fix regression of false private key requirement for certificate/CA import

Read more

OPNsense 26.7.8 released

Fri, 30 Oct 2026 09:24:09 GMT

Hi there,

This update brings another batch of security fixes for core and third
party components following one of the weirdest weeks we have ever seen.
Please pat yourself on the back -- you made it through!

Please take note that OpenSSH 10.6 rejects M...

Read more

OPNsense 26.10 business edition released

Wed, 28 Oct 2026 12:19:57 GMT

The OPNsense business edition transitions to this 26.10 release including
interface management and gateway groups via MVC/API, wireless MVC/API support,
firewall rules now defaulting to MVC/API, customizable favorites menu, full
screen grids, the OPNDN...

Read more

Re: OPNsense 26.4.2 business edition released

Fri, 23 Oct 2026 11:25:53 GMT

Here are the full patch notes for patch release 4:

o system: fix untrusted directory support in certctl.py
o system: fix deprecation warnings in XMLRPC library
o ports: php 8.3.36[44]

--
[44] https://www.php.net/ChangeLog-8.php#8.3.36

Read more

PHP2Shell (CVE-2026-109618, CVE-2026-109619) fix for 26.4.2p4, 26.1.11, 26.7.7

Wed, 21 Oct 2026 19:04:08 GMT

Dear community and business users,

We have just released a hotfix for the OPNsense Community Edition (26.7.7, 26.1.11) and Business Edition (26.4.2p4), addressing two recently disclosed critical PHP vulnerabilities.

The update includes the following PH...

Read more

OPNsense 26.7.7 released

Tue, 13 Oct 2026 13:19:19 GMT

Here we go again...

This release is mainly for the brave Hyper-V users who fought kernel panics
since 26.7, which got fixed in 26.7.6 only to cause segmentation faults for
others.  Thanks all for testing and correcting the problem in FreeBSD!

The other...

Read more

Re: OPNsense 26.7.6 released

Fri, 09 Oct 2026 18:05:44 GMT

A hotfix release was issued as 26.7.6_3:

o interfaces: PPP type validation fixes for new assignments
o firewall: fix off by one in addAction() in alias diagnostics
o mvc: UidField: revert "allow an arbitrarily specified UID for system scope users upon ...

Read more