Re: OPNsense 25.10.2 business edition released

Mon, 16 Mar 2026 09:35:01 GMT

A hotfix release was issued as 25.10.2_4:

o unbound: fix blocklist add in reporting page following POST-only fix

Read more

Re: OPNsense 25.10.2 business edition released

Thu, 12 Mar 2026 14:16:56 GMT

A hotfix release was issued as 25.10.2_3:

o captive portal: fix hard-timeout calculation
o firmware: avoid update-hook background cleanups
o mvc: fix CSRF vulnerability in multiple API endpoints by enforcing POST-only requests[21] (contributed by Olive...

Read more

OPNsense 26.1.4 released

Wed, 11 Mar 2026 12:44:25 GMT

Hi,

This is basically a maintenance release in assorted areas, but also includes
a CVE for the GUI for missing POST checks in the API.  We thank everyone
for reporting issues and testing the fixes with us to allow for easy and fast
releases such as thi...

Read more

OPNsense 26.1.3 released

Wed, 04 Mar 2026 12:28:03 GMT

Hi and hello,

This update finally brings in Python 3.13 after the struggle we had with
3.11 and missing security patches.  A number of things were fixed for the
new rules GUI as well as assorted minor things in all areas of the code
base.  Two FreeBSD ...

Read more

Re: OPNsense 26.1.2 released

Thu, 19 Feb 2026 14:22:05 GMT

SHA256 (OPNsense-26.1.2-dvd-amd64.iso.bz2) = 8b81427b049ca291bed982a85c6eb821e9887f70b79c1d8183c24721e037f938
SHA256 (OPNsense-26.1.2-nano-amd64.img.bz2) = 24ae4c3f178bcc53475ab0b2ec50a7b06e9541f5080c156e5aa967c12a8d343e
SHA256 (OPNsense-26.1.2-serial-...

Read more

Re: OPNsense 26.1.2 released

Tue, 17 Feb 2026 10:18:26 GMT

A hotfix release was issued as 26.1.2_5:

o firewall: add missing implementation for "disablereplyto" in new rules
o firewall: fix encoding issue in dashboard widget
o captive portal: fix hard-timeout calculation
o kea: add required scope to prefix watc...

Read more

OPNsense 26.1.2 released

Thu, 12 Feb 2026 09:41:09 GMT

Hi there,

This is a smallish update with a number of fixes and another round of Python
CVEs addressed.  New images based on this stable version are planned for next
week.

At the moment work focuses on the IPv6 support for the captive portal which
shoul...

Read more

OPNsense 25.10.2 business edition released

Mon, 09 Feb 2026 15:53:56 GMT

This business release is based on the OPNsense 25.7.10 community version
with additional reliability improvements, but without revamped Unbound
blocklists for the time being.

Here are the full patch notes:

o system: gateway monitor Shell class use et a...

Read more

OPNsense 26.1.1 released

Wed, 04 Feb 2026 13:23:30 GMT

Hello there,

This ships OpenSSL and Python security updates as well as address a number
of shortcomings of the initial 26.1 and community-infused improvements of
the new rules GUI which we would not have dreamed of to get this quickly.

We are very happ...

Read more

Re: OPNsense 26.1 released

Fri, 30 Jan 2026 15:48:28 GMT

A hotfix release was issued as 26.1_4:

o interfaces: host discovery: make sure the full dump includes NDP output on fallback
o interfaces: fix migration for IPv6 no-release option
o firewall: FilterBaseController requires Base\UserException
o firewall:...

Read more