Updates

OPNsense has issued hotfix release **25.10.2_12**.

This update enhances the firmware with an upgrade hint and fingerprint for the upcoming 26.4 release and includes support for the ISC-DHCP plugin migration. These improvements help ensure a smoother transition and better upgrade visibility for users.

For full details, see the official announcement:
https://forum.opnsense.org/index.php?topic=50819.msg265195#msg265195

OPNsense has released hotfix **25.10.2_11**, continuing its commitment to delivering reliable and secure updates to the community.

This hotfix includes a system adjustment that moves `ldap_escape()` to the caller to prevent potential side effects. The update reflects the project’s proactive approach to maintaining stability and ensuring smooth operation for users.

Staying current with hotfix releases helps maintain…

OPNsense has released hotfix version **25.10.2_10**, addressing important security and performance improvements.

This update includes:
– A fix to properly escape LDAP usernames during search, addressing a reported security issue (CVE reference available).
– An enhancement to Unbound, limiting DuckDB to a single thread in write mode to significantly reduce logger memory usage.

These refinements reflect OPNsense’s continued commitment…

OPNsense has released a new update, reaffirming its ongoing commitment to security and reliability.

This latest release addresses several important security issues, most notably a fix for an LDAP authentication injection vulnerability that could allow group restriction bypass during login. The update also includes important third-party patches for Curl and OpenSSL, further strengthening overall system security.

With…

OPNsense has released hotfix **25.10.2_8**, delivering several important stability and functionality improvements.

This update includes fixes for:

– The static neighbor apply button in Interfaces (contributed by Konstantinos Spartalis)
– Missing “log” statement in one-to-one NAT rule rendering
– Delete selected functionality for IPsec SPD and SAD
– A configuration-related MVC issue

These…

OPNsense has released a new update featuring several third-party package upgrades along with important core fixes and improvements.

Notably, this release introduces Kea DHCP enhancements, including DDNS and extended options support—highly anticipated features for many users. Additionally, captive portal IPv6 improvements are now ready for broader testing in the development version, marking continued progress toward stronger…

OPNsense has released hotfix version **25.10.2_4**, continuing its commitment to stability and performance.

This update includes a fix for **Unbound**, resolving a blocklist addition issue on the reporting page following the recent POST-only adjustment. The hotfix ensures smoother functionality and maintains the reliability users expect from OPNsense deployments.

Staying current with updates like this helps maintain optimal…

OPNsense has released hotfix **25.10.2_3**, delivering targeted improvements to enhance stability and security across the platform.

This update includes:

– A fix for captive portal hard-timeout calculation
– Prevention of unnecessary background cleanups in firmware update hooks
– A security enhancement addressing a CSRF vulnerability in multiple API endpoints by enforcing POST-only requests (contributed by…

OPNsense has released a new maintenance update, focusing on stability, reliability, and continuous improvement across various areas of the platform.

This release includes important fixes, along with a security update addressing a CVE related to missing POST checks in the GUI API. The team extends appreciation to the community for reporting issues and actively…

OPNsense has released a new update, marking an important milestone with the migration to **Python 3.13**. This upgrade follows previous challenges with Python 3.11 and related security patch limitations, reinforcing the project’s ongoing commitment to security and stability.

The update also delivers multiple improvements to the new rules GUI, along with a variety of…