Hello,

Here we are with further refinements to 25.1 and it is looking
pretty well so far.  Included are the recent FreeBSD security
advisories and the OpenSSL 3.0.16 which came out just yesterday.

The roadmap for 25.7 is being worked on at the moment a...

This business release is based on the OPNsense 24.7.12 community version
with additional reliability improvements.

Here are the full patch notes:

o system: add a "time-loop" around authentication for failed attempts
o system: remove the SSL bundles in ...

What up!

Just a small update to ship the latest changes and fixes.  The anti-lockout
not working was finally addressed.  Thanks for all the valuable feedback on
the forum!

Here are the full patch notes against version 25.1-RC1:

o system: prioritize ind...

A hotfix release was issued as 24.7.12_2:

o plugins: turning binary data into JSON may fail globally
o unbound: fixup permission on copy
o ports: openvpn 2.6.13[11]

The upgrade path from the development version to 25.1-RC1 is also available now.

[11] h...

Hey all,

The 25.1 series is nigh!  This offers images based on an RC1 state with
stable packages and online upgrades for the development version of 24.7.
We will likely release a small RC2 online update in the near future.
The final release date for 25...

One more packages update here before RC early next week.

A hotfix release was issued as 24.7.11_2:

o firmware: fix the return value handling in the firmware option of the console menu
o mvc: fix a regression in "normalize multiple slashes in paths"

Please note we had to hotfix the kernel which will not reinstall
automatically if you caught the bad version.  If you experience
panics on 24.7.10 relating to pf(4) please reinstall from the GUI
(which includes an automatic reboot) or ru...

A hotfix release was issued as 24.7.10_1:

o unbound: use tls-cert-bundle to point to remaining valid bundle

Hi there,

This ships a number of base system changes, kernel fixes and driver
updates.  The time-loop authentication change is back with the fixed
TOTP case and the Unbound domain overrides are now found in query
forwarding si...

This business release is based on the OPNsense 24.7.9 community version
with additional reliability improvements.

Here are the full patch notes:

o system: remove obsolete banners from static pages
o system: address CRL/c...

A hotfix release was issued as 24.7.9_1:

o system: reverted "time-loop" patch as it makes Local+TOTP authentication fail

Please note we had to hotfix the kernel which will not reinstall
automatically if you caught the bad version.  If you experience
panics on 24.7.10 relating to pf(4) please reinstall from the GUI
(which includes an automatic reboot) or run "opnsense-upd...

A hotfix release was issued as 24.7.10_1:

o unbound: use tls-cert-bundle to point to remaining valid bundle

This business release is based on the OPNsense 24.7.9 community version
with additional reliability improvements.

Here are the full patch notes:

o system: remove obsolete banners from static pages
o system: address CRL/cert subject hash mismatch during...

A hotfix release was issued as 24.7.9_1:

o system: reverted "time-loop" patch as it makes Local+TOTP authentication fail

Dear all,

This is a minor update that further tweaks the trust store integration
and firmware updates tying into it although in practice it does not
change the current behaviour from a user perspective.  If something is
not behaving as usual afterwards...

Hey there,

Minor update with FreeBSD security advisories and a number of stable
branch patches for various Intel drivers.  Two problems with the RRD
rework are herby fixed as well.

Here are the full patch notes:

o system: add missing MinProtocol in Ope...

A hotfix release was issued as 24.10_1:

o firmware: fix timeout in update CRL fetcher

A hotfix release was issued as 24.7.5_3:

o system: due to observed timing issues avoid the use of closelog()
o openvpn: fix "auth-gen-token" being supplied in server mode