Re: OPNsense 26.7.8 released

Sat, 31 Oct 2026 07:31:01 GMT

A hotfix release was issued as 26.7.8_1:

o system: revert "allow a single dynamic interface gateway to work for both IPv4 and IPv6"

Read more

OPNsense 26.7.8 released

Fri, 30 Oct 2026 09:24:09 GMT

Hi there,

This update brings another batch of security fixes for core and third
party components following one of the weirdest weeks we have ever seen.
Please pat yourself on the back -- you made it through!

Please take note that OpenSSH 10.6 rejects M...

Read more

OPNsense 26.10 business edition released

Wed, 28 Oct 2026 12:19:57 GMT

The OPNsense business edition transitions to this 26.10 release including
interface management and gateway groups via MVC/API, wireless MVC/API support,
firewall rules now defaulting to MVC/API, customizable favorites menu, full
screen grids, the OPNDN...

Read more

Re: OPNsense 26.4.2 business edition released

Fri, 23 Oct 2026 11:25:53 GMT

Here are the full patch notes for patch release 4:

o system: fix untrusted directory support in certctl.py
o system: fix deprecation warnings in XMLRPC library
o ports: php 8.3.36[44]

--
[44] https://www.php.net/ChangeLog-8.php#8.3.36

Read more

PHP2Shell (CVE-2026-109618, CVE-2026-109619) fix for 26.4.2p4, 26.1.11, 26.7.7

Wed, 21 Oct 2026 19:04:08 GMT

Dear community and business users,

We have just released a hotfix for the OPNsense Community Edition (26.7.7, 26.1.11) and Business Edition (26.4.2p4), addressing two recently disclosed critical PHP vulnerabilities.

The update includes the following PH...

Read more

OPNsense 26.7.7 released

Tue, 13 Oct 2026 13:19:19 GMT

Here we go again...

This release is mainly for the brave Hyper-V users who fought kernel panics
since 26.7, which got fixed in 26.7.6 only to cause segmentation faults for
others.  Thanks all for testing and correcting the problem in FreeBSD!

The other...

Read more

Re: OPNsense 26.7.6 released

Fri, 09 Oct 2026 18:05:44 GMT

A hotfix release was issued as 26.7.6_3:

o interfaces: PPP type validation fixes for new assignments
o firewall: fix off by one in addAction() in alias diagnostics
o mvc: UidField: revert "allow an arbitrarily specified UID for system scope users upon ...

Read more

OPNsense 26.7.6 released

Thu, 08 Oct 2026 12:30:27 GMT

Oh, hi!

This update finally brings interface settings to MVC/API!  It also brings
a number of fixes and improvements from FreeBSD stable/15 including a fix
for previous Hyper-V boot issues and hopefully also fixes ice driver DDP
issues with newer firmw...

Read more

Re: OPNsense 26.4.2 business edition released

Tue, 06 Oct 2026 09:01:02 GMT

Here are the full patch notes for patch release 3:

o system: clear password change session flag only after password was changed[37] (reported by Wu Wenhao)
o system: use correct type for IP when killing active states in "lockout_handler" (reported by O...

Read more

OPNsense 26.7.5 released

Wed, 30 Sep 2026 08:57:54 GMT

Hi again,

This update fixes a few security related things and updates to OpenSSL 3.5.9.
We are also updating the package manager to version 2.8.4 to sync up with
the current version being used in FreeBSD.

The default password hash changes from bcrypt t...

Read more