Home »
Blog
Re: OPNsense 26.4 business edition released
Wed, 03 Jun 2026 10:35:26 GMT
A hotfix release was issued as 26.4_20:
o system remove unused data-tooltip that is not properly escaped from certificates widget[56]
o interfaces: dhclient.conf does not cope with multi-line request/require
o firewall: fix for missing HTML escape in d...
OPNsense 26.1.9 released
Tue, 02 Jun 2026 13:38:14 GMT
Hello again,
As a sign of the times this update ships 3 core security fixes as well
as OS and third party updates. Kea dynamic prefix delegation is also
included plus more GUI improvements.
Time to 26.7 is short. See you soon! :)
Here are the full p...
Re: OPNsense 26.4 business edition released
Wed, 13 May 2026 12:00:34 GMT
A hotfix release was issued as 26.4_14:
o system: properly escape username in sync_user.php command invoke[52] (contributed by Konstantinos Spartalis)
o system: fix XMLRPC sync with VIP and "nosync" option
o interfaces: safeguard DHCPv4 settings agains...
Re: OPNsense 26.1.8 released
Wed, 13 May 2026 08:19:36 GMT
A hotfix release was issued as 26.1.8_5:
o interfaces: follow up on DHCPv4 settings sanitization
o firewall: fix search for floating rules in new rules GUI
o kea: use JSON_UNESCAPED_UNICODE when writing the JSON configuration
o shell: fix syntax error ...
OPNsense 26.1.8 released
Tue, 12 May 2026 13:24:48 GMT
Hi there,
This updated fixes two recently reported vulnerabilities in the core code
pertaining to WAN DHCPv4 configuration and user management. It also includes
third party updates to Dnsmasq, OpenSSH and Unbound amongst others.
Captive portal IPFW ac...
Re: OPNsense 26.1.7 released
Tue, 05 May 2026 13:44:23 GMT
A hotfix release was issued as 26.1.7_3:
o backend: configctl: support -f cache flush parameter to fix cache invalidation preamble "!" pass
Re: OPNsense 26.1.7 released
Mon, 04 May 2026 09:12:07 GMT
A hotfix release was issued as 26.1.7_2:
o system: fix missing base64_decode() in JsonField which prevented user settings from saving
Re: OPNsense 26.4 business edition released
Fri, 01 May 2026 09:31:25 GMT
A hotfix release was issued as 26.4_6:
o system: protect popen() with exec_safe()[34]
o system: lockout bypass fix[35] (contributed by Konstantinos Spartalis)
o system: allow gateway load balance weights from 1 to 10 for more flexibility (contributed b...
Re: OPNsense 26.1.7 released
Thu, 30 Apr 2026 20:14:44 GMT
A hotfix release was issued as 26.1.7_1:
o system: fix missing newline when generating cron jobs due to a regression
OPNsense 26.1.7 released
Thu, 30 Apr 2026 13:26:01 GMT
That was quick!
This includes all very recent FreeBSD SA/EN patches, a number of system
improvements (how are you doing, Kea!) and third party updates for OpenVPN
and StrongSwan.
It also includes one high and one medium advisory for our code. GitHub
h...