Please note we had to hotfix the kernel which will not reinstall
automatically if you caught the bad version.  If you experience
panics on 24.7.10 relating to pf(4) please reinstall from the GUI
(which includes an automatic reboot) or run "opnsense-upd...

A hotfix release was issued as 24.7.10_1:

o unbound: use tls-cert-bundle to point to remaining valid bundle

Hi there,

This ships a number of base system changes, kernel fixes and driver
updates.  The time-loop authentication change is back with the fixed
TOTP case and the Unbound domain overrides are now found in query
forwarding since this offers the same f...

This business release is based on the OPNsense 24.7.9 community version
with additional reliability improvements.

Here are the full patch notes:

o system: remove obsolete banners from static pages
o system: address CRL/cert subject hash mismatch during...

A hotfix release was issued as 24.7.9_1:

o system: reverted "time-loop" patch as it makes Local+TOTP authentication fail

Dear all,

This is a minor update that further tweaks the trust store integration
and firmware updates tying into it although in practice it does not
change the current behaviour from a user perspective.  If something is
not behaving as usual afterwards...

Hey there,

Minor update with FreeBSD security advisories and a number of stable
branch patches for various Intel drivers.  Two problems with the RRD
rework are herby fixed as well.

Here are the full patch notes:

o system: add missing MinProtocol in Ope...

A hotfix release was issued as 24.4.3_1:

o firmware: add fingerprint, migration notes and upgrade hint for 24.10

Hello,

A small update to keep things moving forward while things are quietening
down a little bit.  Still working on improving the trust store integration
and already tackling new MVC/API conversions on the development end.

Here are the full patch note...

A hotfix release was issued as 24.10_7:

o system: fix certificate condition in setCRL() (contributed by richierg)
o firewall: throttle live logging on dashboard widget
o mvc: fix config.xml file open mode in overwrite()
o mvc: add missing request->hasQ...

A hotfix release was issued as 24.10_1:

o firmware: fix timeout in update CRL fetcher

The OPNsense business edition transitions to this 24.10 release including
ZFS snapshot support via GUI/API, rewritten dashboard, system trust MVC/API
support, GRE and GIF MVC/API support, NAT 1-to-1 MVC/API support, WireGuard
QR code generator, dynamic...

Hello there!

A few security and reliability issues this week.  Most notably Suricata
and Unbound.  The dashboard rework seems to be concluded now as the
ACL behaviour was now aligned and should match the user expectation on
the "Lobby" section privileg...

A hotfix release was issued as 24.7.5_3:

o system: due to observed timing issues avoid the use of closelog()
o openvpn: fix "auth-gen-token" being supplied in server mode

A good day to you all,

This release removes significant processing overhead from larger setups
due to being able to coalesce parallel configuration requests for the same
component instead of iterating over the list of selected interfaces one
by one.  A...

This business release is based on the OPNsense 24.4.2 business version
with additional reliability improvements.

Here are the full patch notes:

o system: add snapshots (boot environments) support via MVC/API (contributed by Sheridan Computers)
o system...