Current File : //backups/router/usr/local/opnsense/changelog/25.7.2.htm
<p>Good day,</p><p>This stable update has the look and feel of a typical update across all corners of the project: FreeBSD advisories and errata, fixes and quality of life improvements in core, several plugin and third party software updates.</p><p>We are also compiling the roadmap for 26.1 at the moment. Stay tuned.</p><p>Here are the full patch notes:</p><p><ul><li>system: increase log file download timeout to prevent exit before data has returned</li><li>system: HTML decode entities when generating new QR code for user</li><li>system: add missing timestamp formatter in snapshots</li><li>system: prevent the root user from changing its name</li><li>interfaces: capture netmap ring when listening on interfaces in netmap mode</li><li>firewall: skip reply-to for inversion rules</li><li>firewall: remove unused "set loginterface" clause</li><li>firewall: additional statistics for alias grid</li><li>firewall: fix shaper reset button</li><li>captive portal: preparations for SSO identification support</li><li>dnsmasq: swap hosts and domains tab for consistency reasons</li><li>dnsmasq: allow disabling local for DHCP domains</li><li>firmware: abort on what appear to be partial updates due to obscure file errors</li><li>firmware: store update and upgrade logs in edge cases</li><li>firmware: opnsense-version: support file based -R option</li><li>firmware: opnsense-update: support -g for update log view</li><li>firmware: remove tier 2 workaround for Zenarmor plugins</li><li>firmware: add date to modal header</li><li>kea-dhcp: ignore encoding errors in lease parser</li><li>intrusion detection: fix and simplify grid search in download tab</li><li>ipsec: passthrough networks setting missed "allow new" flag</li><li>ipsec: add firewall rules skip option for VTIs</li><li>ipsec: deprecate legacy stroke and implement swanctl for overview</li><li>isc-dhcp: allow static mapping export for disabled entries</li><li>openvpn: add nopool directive</li><li>unbound: configurable top domain list length in reporting view (contributed by sopex)</li><li>unbound: remove unknown model reference and protect/simplify remaining one</li><li>wireguard: move backend scripts to proper location</li><li>backend: added IPv6 bracket helper for templates (contributed by BPplays)</li><li>lang: updates for Chinese, Czech, German and Greek</li><li>mvc: improve resilience of VPNIdField and LinkAddressField</li><li>mvc: repair side affect of getDescription() change causing performance regressions</li><li>mvc: modify existing and add missing descriptions in models</li><li>mvc: set default validation message for CertificateField</li><li>rc: make changes to php,var,tmp bootstrap</li><li>ui: fix language selection for low vertical resolution screens (contributed by sopex)</li><li>ui: hide header of the picture widget on the dashboard (contributed by sopex)</li><li>plugins: os-clamav 1.8.1[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/security/clamav/pkg-descr">1</a>]</li><li>plugins: os-crowdsec 1.0.12[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/security/crowdsec/pkg-descr">2</a>]</li><li>plugins: os-frr 1.46[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/net/frr/pkg-descr">3</a>]</li><li>plugins: os-shadowsocks 1.2 switches to shadowsocks-rust</li><li>plugins: os-smart 2.4 adds extended info option (contributed by poisonbl)</li><li>plugins: os-telegraf 1.12.13[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/25.7/net-mgmt/telegraf/pkg-descr">4</a>]</li><li>plugins: os-theme-advanced updates logos (contributed by Raushan Patel)</li><li>src: route: fix "route -n monitor" when its output is redirected[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-25:14.route.asc">5</a>]</li><li>src: add a new sysctl in order to differentiate UEFI architectures[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-EN-25:12.efi.asc">6</a>]</li><li>src: libarchive: merge version 3.8.1[<a target="_blank" href="https://www.freebsd.org/security/advisories/FreeBSD-SA-25:07.libarchive.asc">7</a>]</li><li>src: lagg: fix if_hw_tsomax_update() not being called</li><li>src: wg: add support for removing allowed-ip entries and assorted cleanups</li><li>src: ovpn: support multihomed server configurations and assorted cleanups</li><li>src: netlink: fully clear parser state between messages</li><li>src: udp: fix a inpcb refcount leak in the tunnel receive path</li><li>src: p9fs: assorted fixes</li><li>ports: ca_root_nss / nss 3.115[<a target="_blank" href="https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_115.html">8</a>]</li><li>ports: krb5 1.22[<a target="_blank" href="https://web.mit.edu/kerberos/krb5-1.22/">9</a>]</li><li>ports: libpfctl 0.16</li><li>ports: lighttpd 1.4.81[<a target="_blank" href="https://www.lighttpd.net/2025/8/17/1.4.81/">10</a>]</li><li>ports: perl 5.40.3[<a target="_blank" href="https://perldoc.perl.org/5.40.3/perldelta">11</a>]</li><li>ports: php 8.3.24[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.3.24">12</a>]</li><li>ports: py-jq 1.10.0[<a target="_blank" href="https://github.com/mwilliamson/jq.py/blob/master/CHANGELOG.rst">13</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell