Download

Version 26.3   20th May 2026

1. Upgraded the operating system to FreeBSD 14.4-RELEASE-p4:
   • Release notes
   • TCP: remotely exploitable DoS vector (mbuf leak)
   • Remote code execution via RPCSEC_GSS packet validation
   • pf silently ignores certain rules
   • Kernel use-after-free bug in the TIOCNOTTY handler
   • Missing large page handling in pmap_pkru_update_range()
   • Remote code execution via malicious DHCP options
   • Local privilege escalation via execve()
   • pf can overflow the stack parsing crafted SCTP packets
   • Remotely triggerable out-of-bounds heap write in dhclient
   • Stack overflow via select() file descriptor set overflow
   • Heap overflow in libnv
   • Source inconsistency between freebsd-update, EN/SAs, and git
   • dhclient(8) lease validation is too strict
   • TLB invalidation bug on AMD systems with INVLPGB
   • Timezone database information update
   • Periodic timerfd(2) timers may produce incorrect results
   • The page fault handler fails to zero memory
2. Updated third-party packages.
3. Fixed missing Total column in Status Report summary table.
4. Automatically commit settings changes to Settings History repository.
5. Changed Syslog and Trap “Mute” rules to not affect Device Dashboard.
6. Removed HTML styling ability from Login Banner. Only plain text is now allowed.
7. Added F5 Tenant Summary report.
8. Added/updated compiled MIBs:
   • Cisco Ironport
   • Omnitronics
   • Riverbed