We are excited to announce the release of pfSense® software version 2.4.2, now available for new installations and upgrades!

pfSense software version 2.4.2 is a maintenance release bringing security patches and stability fixes for issues present in previous pfSense 2.4.x branch releases.

pfSense 2.4.2-RELEASE updates and installation images are available now!

Highlights

In case you missed the pfSense 2.4.0 and 2.4.1 release changes, see the previous documents:

Aside from security fixes, the changes in pfSense software version 2.4.2 also include important corrections for regressions in previous 2.4.x releases.

Notable changes in 2.4.2 include:

  • Updated to OpenSSL 1.0.2m to address CVE-2017-3736 and CVE-2017-3735
  • Fixed three potential XSS vectors
  • Fixed issues with PPP interfaces that have VLAN parents (e.g. PPPoE on VLAN interfaces)
  • Fixed issues with LAGG interface stability and connectivity
  • Improved performance for the network and GUI
  • Fixed issues with IPsec status display
  • Fixed several issues with ALTQ/QoS/Limiter behavior
  • Added a GUI for the built-in switch on the SG-3100
  • Fixed handling of VLAN priority
  • Fixed several issues with update and package handling
  • … and many more!

To see the rest of the changes, and find more detail, see the Release Notes.

Important Information about Upgrading and Installing pfSense software version 2.4.0 and later

If you have not yet upgraded to pfSense version 2.4.0 or later, read the information in the 2.4.0 Release Announcement before updating for important information that may impact the ability of a firewall to upgrade to pfSense version 2.4.x.

If either by choice or by hardware limitations a firewall cannot be upgraded to pfSense 2.4.x, see the pfSense 2.3.5-RELEASE announcement for information on obtaining the latest 2.3.x release.

Reporting Issues

This release is ready for a production use. Should any issues come up with pfSense 2.4.2-RELEASE, please post about them on the the forum.

Thanks!

pfSense CE software is Open Source

For those who wish to review the source code in full detail, the changes are all publicly available in three repositories on GitHub:

Download

Downloads for New Installs

Using the automatic update process is typically easier than reinstalling to upgrade. See the Upgrade Guide page for details.

Supporting the Project

Our efforts are made possible by the support of our customers and the community. You can support our efforts via one or more of the following.

  • Official appliances direct from Netgate. Our appliances are the fast, easy way to get up and running with a fully-optimized firewall.
  • Commercial Support – Purchasing support from us provides you with direct access to Netgate Global Support.
  • Professional Services – For more involved and complex projects outside the scope of support, our most senior engineers are available under professional services.