Project

General

Profile

2.9.0

closed

pfSense CE software release

100%

220 issues   (219 closed — 1 open)

Issues by
Bug

108/108
Regression

32/32
Feature

33/34
Todo

46/46
Related issues
MM pfSense Packages - Bug #11797: Traffic Totals lost upon reboot when using a ramdisk for /var and /tmp Actions
pfSense Packages - Bug #14491: FRR not starting with AgentX enabled Actions
CM Bug #14741: PHP error in DNS Forwarder host overrides when the language is set to French Actions
MM Bug #15017: DHCP relay does not respect configured CARP VIP status Actions
MM Bug #15087: IPsec Keep Alive does not update the gateway status Actions
MM pfSense Packages - Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect Actions
MM Bug #15346: Cannot add Port Forward with an unassociated filter rule Actions
MM Bug #15411: Log entries without a hostname can cause the system log to display in an unexpected manner Actions
KP Bug #15770: Using a Limiter on a rule with a gateway group limits all traffic through that gateway instead of the host IP address Actions
CM pfSense Packages - Bug #15909: Prevent tailscale interface from being assignable Actions
MM pfSense Packages - Bug #15916: pfBlockerNG dnsbl daemon not able to start in CARP mode Actions
CM Bug #16141: RRD data fails to restore via the ECL Actions
RL Bug #16142: XMLRPC requests fail due to incorrect request path Actions
MM Bug #16153: ECL can modify a discovered config file Actions
MM pfSense Packages - Bug #16211: Python errors in Cellular Actions
Bug #16216: PPPoE interfaces using ``if_pppoe`` increase error counters due to normal ALTQ traffic shaping operations Actions
Bug #16218: All-Inkl Dynamic DNS responses are not parsed correctly Actions
MM pfSense Packages - Bug #16220: WireGuard dashboard widget default refresh interval is invalid Actions
MM pfSense Packages - Bug #16225: Telegraf service does not restart after change of settings Actions
Bug #16248: QLink/Marvell 41000 NIC bug Actions
MM Bug #16264: Captive Portal Ethernet rules can block ARP Actions
SW Bug #16266: Thermal Sensors widget does not respect per-sensor threshold vales Actions
MM Bug #16272: Input validation text for deleting an IP Alias VIP within a CARP VIP subnet may reference incorrect VIP Actions
CM Bug #16290: ``diag_authentication.php`` crashes with a core dump if RADIUS client Shared Secret value is not correct Actions
JP Bug #16312: ``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters Actions
JP Bug #16314: GUI login events from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions
MM Bug #16322: Gateway monitoring daemon can unexpectedly use a CARP VIP as the source IP address Actions
JP Bug #16339: Captive Portal ``backwardsyncpassword`` value not sanitized in status output Actions
Bug #16341: Error notification and log message ``"Updating repositories metadata" returned error code 1`` at boot due to ``certctl`` race condition Actions
MM pfSense Packages - Bug #16348: HAProxy configuration references non-existent certificate files Actions
MM Bug #16351: Automatic IPv6 gateways for OpenVPN servers are created with the wrong gateway address Actions
MM Bug #16376: Some remote syslog messages are duplicated when "System Events" option is enabled Actions
JP Bug #16428: OpenVPN does not include ``client-to-client`` in generated configuration for Peer-to-Peer SSL/TLS servers Actions
KP Bug #16429: NAT64 rules using ``reply-to`` do not forward packets Actions
KP Bug #16456: Memory leak in ``libpfctl`` causes ``bsnmpd`` memory usage to grow over time Actions
MM Bug #16472: Cannot set RADVD router lifetime to ``0`` Actions
Bug #16475: Filter rule evaluation continues after matching a ``match quick`` rule Actions
MM Bug #16487: Virtual IP addresses on PPPoE interfaces using ``if_pppoe`` can prevent PPP session termination Actions
MM Bug #16495: Gateway list order is incorrect until reloading page after moving entries and saving Actions
MM Bug #16505: Korean locale configuration name is incorrect Actions
MM Bug #16540: Reserved DUMMYNET pipes for Captive Portal can overlap Actions
KP Bug #16546: NAT64 rules do not pass traffic when a gateway is specified for the rule Actions
CM Bug #16549: Captive Portal "Allowed IPs" entries do not work if the language is not set to English Actions
Bug #16550: Cannot load alternate TCP Congestion Control kernel modules Actions
CM Bug #16552: Hostnames in Kea static leases may not be registered with DNS Actions
MM Bug #16557: Alerts do not trigger for empty configuration change descriptions Actions
MM Bug #16566: Incorrect configuration change message when deleting an outbound NAT rule Actions
MM Bug #16579: Firewall logs do not correctly parse ``short`` packet errors Actions
KP Bug #16588: ``pfctl`` shows incorrect number of table addresses Actions
JP Bug #16593: Potential remote command execution via DNSSL router advertisement messages Actions
CM Bug #16602: ``kea2unbound`` crashes when reading an invalid configuration file Actions
MM Bug #16610: GUI does not prevent adding a VIP with a blank address Actions
KP Bug #16614: Connections from the firewall itself fail with oversize packets and TSO enabled Actions
MM Bug #16625: Input validation error when saving an existing static route which contains an alias destination Actions
JP Bug #16630: Inconsistent and incorrect privilege names on some PPP service-related log tabs Actions
MM Bug #16634: Some package installation configuration data may be missing after OS upgrade Actions
MM Bug #16637: Unbound configuration validation does not test the complete configuration Actions
MM Bug #16644: Firewall log always shows rules with Reject action under "Associated Rules" Actions
MM Bug #16654: Interfaces menu does not use natural sorting when configured to sort alphabetically Actions
MM Bug #16661: UTF-8 characters in configuration data can result in an invalid configuration Actions
MM Bug #16681: Inaccurate "No default gateway found" log message when the default gateway is set to automatic Actions
MM Bug #16690: Dynamic DNS client ignores Verify SSL/TLS Certificate Trust option when the entry does not contain a username Actions
MM Bug #16705: Automatic gateways for OpenVPN peer-to-peer servers with a ``/30`` tunnel network do not use the peer address Actions
MM Bug #16709: Cannot disable IPsec Advanced Settings tab option for Strict Interface Binding Actions
MM Bug #16719: DHCP clients may not receive the reserved address after changing the DHCP static mapping Actions
CM Bug #16720: GUI performance degradation due to check for weak passwords on each page load Actions
JP Bug #16721: Creating a new user ignores certificate checkbox value if the certificate fields are populated Actions
MM Bug #16724: RAM disk package data is not preserved for additional packages Actions
LS Bug #16726: Loader menu does not display the logo properly Actions
CC Bug #16729: Firewall rule source option ``This Firewall (self)`` is not available when duplicating floating rules Actions
Bug #16731: Cannot update GoDaddy Dynamic DNS AAAA record Actions
JP Bug #16743: ``isvalidpid()`` function does not properly check or escape PID file parameter Actions
JP Bug #16744: Potential XSS in Delegated Length value for Prefix Delegation on ``services_dhcpv6.php`` when using Kea Actions
MM pfSense Packages - Bug #16756: Editing a Firewall Rule before Forcing pfBlockerNG Update Empties All Aliases Actions
JP Bug #16763: Potential Stored XSS in ``diag_arp.php`` when using ISC DHCP Actions
MM Bug #16769: Interfaces Status shows an invalid SSID value for Wi-Fi interfaces Actions
JP Bug #16770: Potential XSS in RSS Widget feed content post titles Actions
MM Bug #16771: NULL bytes in an IP address can trigger PHP errors from ``ip2long()`` Actions
JP Bug #16773: Potential XSS in Captive Portal widget Actions
KP Bug #16783: Same port forward on multiple WANs can generate a PF error due to Pure NAT mode NAT reflection Actions
LS Bug #16784: Error updating repository metadata at boot with certain packages installed Actions
JP Bug #16799: LDAP shell authentication does not honor configured group DN restriction Actions
MG Bug #16828: Kernel panic (page fault) in ``bpfmtap`` via ``vlantransmit`` with Suricata BPF listeners active on VLAN interfaces Actions
CM Bug #16836: IPsec daemon can crash if a peer initiates two rekeys for the same child SA Actions
MM Bug #16861: Static route not removed when enabling ``dpinger_dont_add_static_route`` while a gateway monitor IP address is set Actions
JP Bug #16898: Potential command execution via CR/LF in System Proxy settings Actions
JP Bug #16899: Potential command execution via CR/LF in OpenVPN settings Actions
JP Bug #16900: Daemon configuration manipulation via CR/LF in ISC DHCP settings Actions
JP Bug #16901: Daemon configuration manipulation via CR/LF in SNMP settings Actions
MM Bug #16906: Unbound configuration may be generated with duplicate interface bindings Actions
JP Bug #16918: Potential stored XSS in ``browser.php`` used by ``diag_edit.php`` Actions
JP Bug #16922: Captive Portal authentication failures from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions
JP Bug #16923: Potential XSS via inline Firewall Log rule descriptions Actions
JP Bug #16924: Potential stored XSS via Firewall Schedules Actions
MM Bug #16925: IPv6 Track Interfaces ignores the ``Disabled`` Router Advertisements mode Actions
CM Bug #16927: Multiple ``updaterrd.sh`` processes Actions
JP Bug #16940: Potential XSS in DHCPv4 Pool Descriptions Actions
JP Bug #16941: Potential XSS in DHCPv6 Pool Descriptions Actions
JP Bug #16942: Potential XSS via IPsec Phase 1 descriptions while editing Phase 2 entries Actions
JP Bug #16943: Potential XSS in PPP instance Provider and Plan fields Actions
JP Bug #16944: Potential XSS in Dynamic DNS widget display of Custom and RFC2136 entries Actions
JP Bug #16945: Potential XSS via URL Table Ports Alias content Actions
JP Bug #16947: Potential Local File Include vulnerability via Dashboard widget sequence data Actions
MM Bug #16954: Filter rules created as part of NAT rules can have an invalid protocol value Actions
JP Bug #16962: Daemon configuration manipulation via CR/LF in ISC DHCP numbered option settings Actions
JP Bug #16964: URL tables cannot import content from ``tgz`` file URLs Actions
JP Bug #16976: Potential XSS in Traffic Graphs Display option Actions
JP Bug #16979: Traffic Graphs display option "Description" does not utilize DHCP static mapping descriptions Actions
MM Regression #13622: Retain previous QinQ VLAN tag type value for existing entries on upgrade Actions
SW Regression #16232: Swap fails to activate when multiple swap partitions exist Actions
SW Regression #16243: PPPoE MSSFix uses incorrect values for 6RD Actions
BD Regression #16313: sshguard patch files are not present in devel branches Actions
MM Regression #16326: Dynamic DNS does not use preferred VIP in Gateway Group Actions
MM Regression #16330: Changing a firewall rule protocol always toggles the display of advanced option Actions
Regression #16362: ``syslogd`` daemon can terminate when a remote log server refuses connections Actions
Regression #16368: Custom Dynamic DNS services ignore the monitor interface Actions
MM Regression #16407: Editing an alias used in static routes does not correctly update the routing table Actions
MM Regression #16421: OpenVPN servers will not start with DH parameter lengths less than 2048 Actions
Regression #16449: e1000 network interfaces unexpectedly link at half-duplex Actions
MM Regression #16451: CE shows QAT as a crypto option Actions
MM Regression #16513: WireGuard service show status stopped but peers can still connect Actions
SW pfSense Packages - Regression #16518: net-mgmt/pfSense-pkg-arpwatch: sendmail_proxy.php missing dot between hostname and domain Actions
MM Regression #16528: ``sshguard`` does not trigger for GUI auth failures due to log format changes Actions
MM Regression #16575: Firewall logs do not match PF rules with rule number ``0`` Actions
Regression #16638: PPPoE on VirtIO ``vtnet`` interface fails to pass routed traffic Actions
KP Regression #16672: Firewall rules matching and tagging across distinct anchors are ignored by subsequent tagged rule Actions
MM Regression #16682: ``daemon`` facility messages are not logged Actions
JP Regression #16688: Creating a CA certificate with Trust Store checked is not trusted Actions
MM Regression #16697: Kea DHCPv6 Leases page does not include delegated prefixes from active dynamic leases Actions
CM Regression #16728: Changing the password from the default in the GUI from the default requires a logout and login to continue Actions
MM Regression #16733: RSS widget generates a PHP error with custom feed Actions
CM Regression #16768: pkg 2.6.2 breaks the GUI update check code Actions
pfSense Packages - Regression #16785: STunnel Core Dumps when started Actions
MG Regression #16790: Kernel panic due to race condition on a ``bpf`` device Actions
MM Regression #16795: Automatically generated ``vpn_networks`` table is missing OpenVPN networks Actions
JP Regression #16803: Links to send WOL packets are not handled consistently, may fail to send Actions
MM Regression #16815: All OpenVPN instances are restarted when applying changes to any assigned interface Actions
JP Regression #16825: Shared Key OpenVPN tunnels need directive to bypass deprecation error Actions
MM Regression #16863: RADIUS authentication fails when attribute contains an invalid ACL Actions
MM Regression #16866: Traffic Shaper Wizard duplicates all firewall rules when no shaping options are enabled Actions
LW Feature #12495: Preserve other record types when updating IPv4 or IPv6 using deSEC DDNS Actions
MM Feature #13340: Option to change QinQ ethertype to Service VLAN Tag Actions
JP Feature #15221: Sort list of System Tunables Actions
CM Feature #15952: PHP RADIUS client ``Message-Authenticator`` attribute capability Actions
Feature #16029: Add option to search for LDAP groups in the base DN Actions
MM Feature #16068: Option to disable logging of packets blocked due to unmatched IP options Actions
pfSense Packages - Feature #16070: Add ANDwatch package Actions
MM pfSense Packages - Feature #16089: Add Zabbix 7.4 Actions
JP Feature #16166: Option to deactivate ALTQ for VirtIO ``vtnet`` interfaces Actions
MM Feature #16215: Allow floating rules using the "match" action to match based on IP Options Actions
MM Feature #16230: Option to control Kea log level Actions
MM Feature #16241: Block non-global NAT64 addresses by default Actions
MM Feature #16253: Fix configuration artifacts on upgrade Actions
MM Feature #16308: Avoid traffic stalls from unnecessary filter reloads Actions
MM Feature #16325: Add support for labels in configuration rules Actions
JP Feature #16423: Update the SSH server configuration to current standards and include post-quantum cryptography algorithms Actions
MM Feature #16502: Support state killing on gateway recovery for policy-routed traffic from the firewall itself Actions
CM Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules Actions
pfSense Packages - Feature #16533: Add Multicast Bridge (mcast-bridge) package Actions
MM Feature #16534: Omit reserved NAT64 addresses from DNS64 answers Actions
pfSense Packages - Feature #16576: update nmap package to 7.99_1 Actions
JP Feature #16607: Auto-renewal for certificates Actions
MM Feature #16613: Allow using interface subnet macros with interfaces which only contain VIPs Actions
MM Feature #16615: Omit NAT64 address for queries from the firewall itself Actions
MM Feature #16616: Option to set a default log level for all logs Actions
MM Feature #16624: Allow packages to preserve RAM disk data between boots Actions
MM Feature #16635: Gateway recovery functionality for the default failover gateway group when all gateways are offline Actions
MM Feature #16666: Allow wildcard records for Dynamic DNS provider deSEC.io Actions
MM Feature #16695: Include System Patches package by default Actions
BD Feature #16706: 6rd interface prefix tracking for OpenVPN IPv6 tunnel network Actions
MM Feature #16819: Log errors when determining the RFC2136 update source address Actions
MM Feature #16914: Set IP Alias VIP as the Router Advertisement source Actions
CM Feature #16960: Kea Custom Configuration JSON privilege Actions
pfSense Packages - Feature #16970: Update mDNS-Bridge package to 3.0 Actions
JP Todo #6727: Apple TouchID/FaceID probes for site icon files that do not exist Actions
JP Todo #15780: Speed up MBUF Usage command in System Information Dashboard widget Actions
MM Todo #16118: Increase amount of system alias content printed in alias list Actions
MM Todo #16128: Sanitize PPPoE configuration parameters Actions
MM pfSense Packages - Todo #16231: Update packages to use the XMLRPC plugins for HA Actions
CM Todo #16291: Relocate Kea control socket and lease database Actions
MM Todo #16307: Refactor PF ruleset generation Actions
CM Todo #16388: Upgrade to Kea 3.0.2 Actions
pfSense Packages - Todo #16399: Update mDNS-Bridge to 2.2 Actions
MM Todo #16432: Allow assigning bridge members which have an IP address Actions
CM Todo #16468: Kea configuration parameter ``client-class`` is deprecated Actions
MM Todo #16469: Improve file handling of the configuration cache Actions
CM Todo #16471: Upgrade PHP to 8.4 Actions
CM Todo #16503: Update Unbound to 1.24.2 to address CVE-2025-11411 Actions
BD Todo #16509: Update strongSwan to 6.0.3 Actions
MM Todo #16515: Set appropriate log levels for PHP and ``/usr/bin/logger`` logs Actions
MM Todo #16538: Prevent the GUI from removing vital packages Actions
MM Todo #16551: Update output and parsing behavior for PHP shell ``pfanchordrill`` Actions
MM Todo #16559: Remove custom gateway ordering Actions
CM Todo #16567: Do not add ``fe80::1:1`` link-local address to interfaces configured for IPv6 tracking Actions
MM Todo #16580: Require absolute path when saving a file on ``diag_edit.php`` Actions
JP Todo #16605: Update certificate expiration warning behavior Actions
JP Todo #16606: Update recommended maximum server certificate lifetimes to 200 days Actions
MM Todo #16620: Remove dead link about ``.local`` TLD use from ``system.php`` Actions
MM Todo #16626: Save the update branch preference on system update Actions
MM Todo #16636: Remove ``quick`` from previous ``match`` rules on upgrade Actions
MM Todo #16653: Add label to automatic PF ``antispoof``, CARP, Captive Portal, and ICMPv6 rules Actions
JP Todo #16657: Improve handling of certificates without subjects Actions
MM Todo #16658: Automatically configure the OpenVPN tunnel MTU when set in the assigned interface configuration Actions
MM Todo #16707: Improve gateway status consistency Actions
MM Todo #16745: Migrate ``config.xml`` encoding from ENT_HTML401 to ENT_XML1 Actions
MM Todo #16747: Remove user survey prompts Actions
MM Todo #16792: Improve GUI handling of user rules that are automatically managed by the system Actions
MM Todo #16793: Improve GUI handling of user aliases that are automatically managed by the system Actions
JP Todo #16796: Retain a copy of the failed ruleset when a filter reload fails Actions
MM Todo #16816: Improve default gateway detection when gateways share the same address Actions
MM Todo #16826: Exclude nginx logs from ``system.log`` Actions
MM Todo #16865: Kea attempts DNS Registration when Unbound is disabled Actions
CM Todo #16882: Update dpinger to version 3.6 Actions
MM pfSense Packages - Todo #16883: Update mcast-bridge to version 1.5.0 Actions
CM pfSense Packages - Todo #16884: Update mdns-bridge to version 2.6.0 Actions
MM Todo #16905: Encode Dynamic DNS credentials when passed as URL parameters Actions
JP Todo #16958: Improve handling of OpenSSL encryption passphrase Actions
JP Todo #16959: Add ``device_key`` to filtered tags list for status output Actions
JP Todo #16961: "Wake All" functionality on ``services_wol.php`` should only use POST Actions
pfSense Packages - Todo #16969: Update mdns-bridge to version 3.0.0 Actions

Also available in: TXT