toward the middle/ end of the year as business edition is running the older version of freebsd. is it better to run the newer freebsd 15.1 until 26.10 is released?
openssl-3.0.21,1 also has about 8 vulnerabilities
opens ssh portable 1.
just a curious home user, curious on what others do at this point each year after new major releases come out
It's not.
OpenSSL released the patches this week for all supported versions. Vulnerabilities rated medium were the highest in the lot, none of them required an out of band patching for BE. They will be addressed on the next dot release.
The same is true for OpenSSH. Versions 10.4 and 10.5 came out weeks apart, July 7th and August 11th.
26.4.2 BE on August 14th included 10.4 as it was the latest available on Freshports at the time.
No available patches are missed. It's all a matter of timing and risk assessment. Nothing critical is missing from BE and there's no need to jump between CE and BE for security reasons.
Thanks I appreciate the response
This is already queued up for 26.4.2p1: https://github.com/opnsense/src/commit/5d31b9a989
Early next week. 26.7.3 took too much time unfortunately.
Cheers,
Franco
PS: The last official FreeBSD 14.3-RELEASE was p16 which should give you a little perspective at what we're already doing. ;)
Quote from: franco on August 30, 2026, 10:40:23 AMPS: The last official FreeBSD 14.3-RELEASE was p16 which should give you a little perspective at what we're already doing. ;)
appreciate your team keeping us safe. just made another donation on top of my yearly business license.
just a home user who likes to tinker and be secure.
much appreciated, thank you :)
FYI https://forum.opnsense.org/index.php?topic=52714.msg273889#msg273889
Quote from: franco on September 01, 2026, 03:19:18 PMFYI https://forum.opnsense.org/index.php?topic=52714.msg273889#msg273889
upgraded and rebooted. thank you Franco 👍