Changes compared to the previous beta, v1.0.0-b.1. See CHANGELOG.md for all changes.
Full changelog
Security
-
Go version has been updated to mitigate the possibility of exploiting the Go vulnerabilities fixed in 1.27.3.
-
Support for Multipath TCP has been disabled to mitigate the possibility of exploiting the vulnerability described in CVE-2026-98432.
Changed
- Client settings in the new web interface: Use global settings now applies to Protection only, blocked services have a separate Use global blocked services switch, and upstream DNS servers and the DNS cache are always editable.
Fixed
-
Invalid SVCB record from DDR when DoH routes are empty.
-
Schedule shift on clock change cases (#8670).
-
Incorrect behaviour on the first launch with the
--check-configflag. -
DHCPv4 settings not being saved when an IPv6-capable interface is selected and DHCPv6 is not configured (#8608).
-
DHCP not being enabled when only the DHCPv6 section is configured.
-
DHCP IPv4 range subnet validation not working (#8609).
-
Client ID validation rejecting valid IPv6 CIDRs with an embedded dotted-decimal IPv4 address (#8610).
-
Client ID validation accepting IPv4 addresses with leading-zero octets (
192.168.01.1), malformed MAC addresses, and ClientIDs with leading or trailing hyphens. -
IP addresses being sorted lexicographically instead of numerically in the web interface (#8636).
-
Invalid secondary bootstrap resolver IPv4 address (#8637).
-
The Server addresses dialog overflowing horizontally when a long value is entered. Long unbreakable values in the settings rows overflowing the page.
-
Encrypted DNS server addresses not appearing in the Setup Guide until the page was reloaded after enabling encryption.
-
Passwords containing emoji being rejected by the first-run setup wizard in the new web interface.
-
Cache size and TTL override rows being locked while the DNS cache was disabled in the new web interface (#8644).
-
Tables staying on an empty page after the last row of that page was deleted in the new web interface (#8644).
-
The Log out button opening the login page in a new tab in the new web interface (#8661).
-
Per-client blocked services schedules being reset when a client was saved in the new web interface (#8638).
-
Client sub-pages of the new web interface showing the default values instead of the client's settings when opened directly or reloaded.