Howdy!

One last stable update before the switch to the 25.1 series.
Security-wise it has bee rather quiet over the past few weeks.
A new kernel is included with a number of smaller reliability
fixes and amendments.

The 25.1-RC1 images follow next week ...

One more packages update here before RC early next week.

Packages were updated in a rolling fashion for this beta.  Release notes follow in 25.1-RC1.

Hey all,

The 25.1 series will include FreeBSD 14.2 so we are putting this BETA
version out based on the latest development state.  This is not meant
for production use but all plugins are provided and future updates of
installations based on these imag...

A hotfix release was issued as 24.7.11_2:

o firmware: fix the return value handling in the firmware option of the console menu
o mvc: fix a regression in "normalize multiple slashes in paths"

A happy holiday season to you all,

This is a minor update all things considered, but it does bring you
the long sought after Tailscale plugin courtesy of Sheridan Computers.
Suricata is also updated to its latest version to fix a couple of CVEs.

In oth...

We subsequently republished the images as 24.10.1 due to CRL verification
issues in the initial 24.10 version which were quickly hotfixed, but could
not easily be fixed in the existing images.

SHA256 (OPNsense-business-24.10.1-dvd-amd64.iso.bz2) = 9ced...

Please note we had to hotfix the kernel which will not reinstall
automatically if you caught the bad version.  If you experience
panics on 24.7.10 relating to pf(4) please reinstall from the GUI
(which includes an automatic reboot) or ru...

A hotfix release was issued as 24.7.10_1:

o unbound: use tls-cert-bundle to point to remaining valid bundle

Hi there,

This ships a number of base system changes, kernel fixes and driver
updates.  The time-loop authentication change is back with the fixed
TOTP case and the Unbound domain overrides are now found in query
forwarding si...

This business release is based on the OPNsense 24.7.9 community version
with additional reliability improvements.

Here are the full patch notes:

o system: remove obsolete banners from static pages
o system: address CRL/c...

A hotfix release was issued as 24.7.9_1:

o system: reverted "time-loop" patch as it makes Local+TOTP authentication fail

Please note we had to hotfix the kernel which will not reinstall
automatically if you caught the bad version.  If you experience
panics on 24.7.10 relating to pf(4) please reinstall from the GUI
(which includes an automatic reboot) or run "opnsense-upd...

A hotfix release was issued as 24.7.10_1:

o unbound: use tls-cert-bundle to point to remaining valid bundle

Hi there,

This ships a number of base system changes, kernel fixes and driver
updates.  The time-loop authentication change is back with the fixed
TOTP case and the Unbound domain overrides are now found in query
forwarding since this offers the same f...

This business release is based on the OPNsense 24.7.9 community version
with additional reliability improvements.

Here are the full patch notes:

o system: remove obsolete banners from static pages
o system: address CRL/cert subject hash mismatch during...

A hotfix release was issued as 24.7.9_1:

o system: reverted "time-loop" patch as it makes Local+TOTP authentication fail

Dear all,

This is a minor update that further tweaks the trust store integration
and firmware updates tying into it although in practice it does not
change the current behaviour from a user perspective.  If something is
not behaving as usual afterwards...

Hey there,

Minor update with FreeBSD security advisories and a number of stable
branch patches for various Intel drivers.  Two problems with the RRD
rework are herby fixed as well.

Here are the full patch notes:

o system: add missing MinProtocol in Ope...

A hotfix release was issued as 24.4.3_1:

o firmware: add fingerprint, migration notes and upgrade hint for 24.10