Category Archives: Security

OPNsense has released hotfix version **26.1.8_5**, delivering important refinements and fixes to enhance stability and usability.

This update includes:
– Improved DHCPv4 settings sanitization in interfaces
– A fix for floating rule search in the new firewall rules GUI
– Improved KEA configuration handling using `JSON_UNESCAPED_UNICODE`
– A shell syntax error correction

These targeted improvements reinforce OPNsense’s commitment to reliability, precision, and continuous enhancement of the platform.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51859.msg266886#msg266886

OPNsense has released a new update addressing two recently reported vulnerabilities within the core system, specifically related to WAN DHCPv4 configuration and user management.

This update further strengthens overall security by incorporating important third‑party upgrades, including Dnsmasq, OpenSSH, and Unbound. Additional improvements have also been made to components such as Captive Portal IPFW, ensuring continued reliability and performance across deployments.

A solid and proactive release that reinforces OPNsense’s commitment to security and stability.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51859.msg266813#msg266813

OPNsense has announced the release of hotfix version **26.1.7_3**.

This update introduces an enhancement to the backend `configctl`, adding support for the **-f cache flush parameter**. This improvement resolves cache invalidation issues related to the preamble “!” pass, ensuring more reliable and consistent system behavior.

A focused and timely update that reinforces OPNsense’s commitment to stability and performance.

Read the full release details here:
https://forum.opnsense.org/index.php?topic=51757.msg266420#msg266420

OPNsense has released hotfix version **26.1.7_2**, addressing a critical issue affecting user settings.

This update resolves a missing `base64_decode()` function in the JsonField component, which previously prevented user settings from being saved correctly. The fix ensures improved reliability and smoother configuration management for administrators.

Staying up to date with hotfix releases like this helps maintain system stability and optimal performance.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51757.msg266345#msg266345

OPNsense has released hotfix version **26.4_6**, delivering important security and stability improvements.

This update includes:
– Enhanced system security by protecting `popen()` with `exec_safe()`
– A fix for a lockout bypass issue (contributed by Konstantinos Spartalis)
– Increased flexibility in gateway load balancing, now allowing weights from 1 to 10

These updates reflect the project’s continued commitment to security, reliability, and community-driven development.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51616.msg266208#msg266208

OPNsense has released hotfix version **26.1.7_1** to address a minor regression.

This update resolves an issue where a missing newline was causing problems during cron job generation. The fix ensures cron jobs are now created correctly and improves overall system reliability.

It’s great to see continued responsiveness and commitment to stability from the OPNsense team.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51757.msg266190#msg266190

OPNsense has responded swiftly with a new update addressing the latest FreeBSD SA/EN patches, alongside several system improvements—including notable enhancements to Kea DHCP.

This release also delivers important third-party updates for OpenVPN and StrongSwan, reinforcing platform stability and security. In addition, one high and one medium advisory related to OPNsense code have been transparently published on GitHub, reflecting the team’s continued commitment to security and responsible disclosure.

A strong example of proactive maintenance and rapid response from the OPNsense team.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51757.msg266158#msg266158

OPNsense has released hotfix version **26.1.6_2**, delivering important refinements and stability improvements.

This update includes:

– ✅ Improved RADIUS accounting with support for **Framed-IPv6-Address** when an IPv6 address is present
– ✅ A fix for **missing allowed addresses in captive portal sessions** during roaming scenarios
– ✅ An update to **Python 3.13.13**

These targeted enhancements reinforce OPNsense’s commitment to reliability, accuracy, and continuous improvement in network security and performance.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51570.msg265837#msg265837

OPNsense has announced the transition of its Business Edition to version 26.4, marking a significant milestone in functionality and usability.

This release delivers a full MVC/API experience, with automation rules now integrated into the new rules GUI for improved management and efficiency. It also introduces Suricata’s new inline inspection mode using “divert,” alongside enhanced IPv6 reliability and additional feature improvements.

Version 26.4 reflects OPNsense’s continued commitment to performance, security, and modern network automation.

Read the full update here:
https://forum.opnsense.org/index.php?topic=51616.msg265196#msg265196

OPNsense has issued hotfix release **25.10.2_12**.

This update enhances the firmware with an upgrade hint and fingerprint for the upcoming 26.4 release and includes support for the ISC-DHCP plugin migration. These improvements help ensure a smoother transition and better upgrade visibility for users.

For full details, see the official announcement:
https://forum.opnsense.org/index.php?topic=50819.msg265195#msg265195