A happy holiday season to you all,

This is a minor update all things considered, but it does bring you the long sought after Tailscale plugin courtesy of Sheridan Computers. Suricata is also updated to its latest version to fix a couple of CVEs.

In other news, 25.1 will contain FreeBSD 14.2 which will be available for BETA preview using images later this week as well. The 25.1-BETA will also include a rewritten theme (light and dark) using the new OPNsense logo already being used in the documentation. It also has MVC/API support for the user and group management plus more you can always find on the roadmap[1] in detail.

Here are the full patch notes:

- system: show multiple SAN entries when supplied by the certificate
- system: traffic dashboard widget should persist interface identifiers
- system: reset dashboard widget options to the default if none of the options match
- system: mismatch in returned "change" attribute for route toggle
- system: suppress XML parse errors in announcement widget when forum is unreachable
- system: catch PHP errors for Google Drive backups
- system: ignore plugins_interfaces() errors in write_config()
- system: fix snapshot ACL
- interfaces: reload GUI in the background
- firewall: remove faulty PPP exclusion in scrubbing rule creation
- dhcp: allow radvd to use /128 CARP VIP as source
- firmware: add "configctl firmware changelog current" backend command
- firmware: refactor lock/unlock scripts using new output helpers
- firmware: opnsense-code: support for origin selection during upgrade mode
- firmware: opnsense-patch: improve patch behaviour for non-default account/repositories combinations
- ipsec: remove hashing algorithm from null cipher
- unbound: make OpenSSL bundle workaround permanent
- mvc: last batch of sessionClose() cleanups in controllers
- mvc: call initialize() after authentication
- mvc: normalize multiple slashes in paths
- plugins: os-caddy 1.7.6[2]
- plugins: os-ddclient 1.26[3]
- plugins: os-nut 1.9[4]
- plugins: os-qemu-guest-agent 1.3[5]
- plugins: os-tailscale 1.0 (contributed by Sheridan Computers)
- plugins: os-telegraf 1.12.12[6]
- ports: monit 5.34.3[7]
- ports: suricata 7.0.8[8]

A hotfix release was issued as 24.7.11_2:

- firmware: fix the return value handling in the firmware option of the console menu
- mvc: fix a regression in "normalize multiple slashes in paths"

Stay safe,
Your OPNsense team