pfSense 2.2.6 releasing

an update of the operating system based on
FreeBSD version made for firewalls and routers

Chris Buechler announced the release of pfSense 2.2.6, an update of the operating system based on FreeBSD Version made for firewalls and routers. This version is mainly a security update to correct problems with the user software-based browser interface and several recent OpenSSL vulnerabilities, it also upgrades the base system to the latest version FreeBSD "pfSense version 2.2.6 and is now available.

pfSense

 This version includes some bug fixes and security updates. Security patches and errata: Web Interface (WebGui) - vulnerability when including the local file in pfSense WebGUI; captiveportal - golds SQL injection vulnerability disconnecting pfSense captive portal; webgui - multiple XSS vulnerabilities and CSRF; update to FreeBSD-RELEASE-p25 10.1; OpenSSL - OpenSSL multiple vulnerabilities in; update the worm strongSwan 5.3.5; includes the patch against the circumvention of authentication vulnerability CVE-2015 to 8023 in the EAP-mschapv2 plugin. 

As always, you can upgrade from a previous version directly to the 2.2.6. For those who already use a 2.2.x version , this is an upgrade low risk. For those on 2.1.x or earlier, there are a number of important changes that may affect you. Pay special attention to the 2.2 upgrade notes for details

Download Link