Category Archives: Security

OPNsense has released hotfix version **26.1.2_5**, delivering several important fixes and improvements to enhance system reliability and performance.

This update includes:
– A firewall enhancement adding the missing implementation for **”disablereplyto”** in new rules
– A fix for an encoding issue in the **dashboard widget**
– A correction to the **captive portal hard-timeout calculation**
– An update to **Kea DHCP**, adding the required scope to prefix watch configuration

These refinements demonstrate OPNsense’s continued commitment to stability, accuracy, and user experience.

Read the full update here:
https://forum.opnsense.org/index.php?topic=50868.msg260567#msg260567

OPNsense has released a small but important update, delivering several bug fixes and addressing another round of Python CVEs to further strengthen security and stability.

The team is also preparing new images based on this stable version, expected next week. Ongoing development efforts are currently focused on enhancing IPv6 support for the captive portal, reflecting continued commitment to modern network requirements and feature improvements.

A steady stream of updates like this highlights the project’s proactive approach to security, reliability, and continuous improvement.

Read the full update here:
https://forum.opnsense.org/index.php?topic=50868.msg260084#msg260084

OPNsense has shared a new business release update based on the **OPNsense 25.7.10 community version**, focused on **additional reliability improvements**. While this release does not yet include the revamped Unbound blocklists, it delivers a series of refinements aimed at enhancing overall stability and operational consistency.

The full patch notes detail system, service, and platform-level improvements, reflecting OPNsense’s continued commitment to quality and maintainability for production environments.

🔗 Read the full announcement and patch notes here:
https://forum.opnsense.org/index.php?topic=50819.msg259774#msg259774

OPNsense has released a new update bringing important OpenSSL and Python security fixes, along with rapid improvements to the new rules GUI. The update also reflects valuable community-driven enhancements, addressing several early shortcomings of the 26.1 release faster than anticipated.

Another strong step forward in security, stability, and collaboration within the OPNsense ecosystem.

Read the full update here: https://forum.opnsense.org/index.php?topic=50704.msg259129#msg259129

OPNsense has released a new hotfix, **version 26.1_4**, bringing targeted improvements and fixes.
The update enhances interface host discovery (including complete NDP output on fallback), improves IPv6 no-release migration handling, and refines firewall logic for better reliability.

A solid step forward in maintaining stability and performance across deployments.
Read the full details here: https://forum.opnsense.org/index.php?topic=50544.msg258501#msg258501

OPNsense has released a new hotfix update, **version 25.7.11_9**, continuing its focus on stability and reliability.

This update includes improvements to host discovery, firewall handling (including GeoIP alias expiry and rule protocol safety), and a fix to dnsmasq logging conditions—helping ensure smoother network operations and clearer diagnostics.

Full details are available in the official announcement:
https://forum.opnsense.org/index.php?topic=50384.msg258167#msg258167

For more than 11 years, OPNsense has continued to drive innovation in open source firewall technology. By focusing on modular design, enhanced security, reliable firmware upgrades, multi-language support, and rapid adoption of upstream updates, OPNsense delivers a modern, robust platform trusted by organizations worldwide. Its commitment to standards like IPv6 highlights an ongoing dedication to future-ready network security.

Read the full update here: https://forum.opnsense.org/index.php?topic=50544.msg258068#msg258068

OPNsense has released a new hotfix, **26.1.r2_2**, bringing helpful improvements to network stability and firewall management.

**What’s included:**
– Interfaces now correctly emit a PD request when no idassoc6/track6 LAN is configured, aligning with previous behavior.
– Firewall updates allow previously associated DNAT rules to be editable, improving flexibility and administration.

This update reinforces OPNsense’s commitment to reliability and continuous improvement.

Read the full announcement here:
https://forum.opnsense.org/index.php?topic=50514.msg257863#msg257863

OPNsense has released the second release candidate for version 26.1, bringing additional fixes driven by valuable feedback from its active community. This update includes the long‑awaited **dhcp6c refresh** alongside other improvements and is available as an **online‑only update** for users already on **26.1‑RC1**.

Another positive step toward a stable and reliable 26.1 release.

Read the full update here: https://forum.opnsense.org/index.php?topic=50514.msg257829#msg257829

🚀 **OPNsense Update: Development Path Unlocked**

OPNsense has confirmed that the upgrade path from the development version has been successfully tested and is now unlocked. Users can now upgrade from **25.7.11 to 26.1-RC1** by switching the firmware settings type to **“Development,”** checking for updates, and installing. A second update check will complete the upgrade.

This marks another positive step forward in ensuring a smooth and reliable upgrade experience for the community.

🔗 Read the original update here: https://forum.opnsense.org/index.php?topic=50472.msg257544#msg257544