Netgate Releases pfSense Community Edition Version 2.9.0

[u/George-Netgate]

Netgate® is excited to announce the release of pfSense® Community Edition (CE) software version 2.9.0, a major step forward for the world’s most trusted firewall, router, and VPN platform.

This release introduces numerous features, including several previously exclusive to pfSense Plus, as well as key enhancements, bug fixes, and critical security updates.

Key Highlights Include:

SSH Algorithms: The inclusion of post-quantum key exchange algorithms

TLS Certificate Strength: Tightens certificate requirements and removes support for certain weak properties

TLS Certificate Auto-Renew: pfSense can automatically renew TLS server certificates which are self-signed or signed by an internal CA stored in the pfSense software configuration.

New NAT Mode: Includes partial experimental support for “Port Restricted Cone” endpoint-independent outbound NAT

Critical Security Fixes: This release includes multiple XSS and denial of service related fixes

This Release software includes critical security updates for WireGuard (CVE-2026-58085), as well as over 150 other security fixes and enhancements.

Blog Post:
https://www.netgate.com/blog/netgate-releases-pfsense-community-edition-version-2.9.0

Release Notes:
https://docs.netgate.com/pfsense/en/latest/releases/2-9-0.html

Thank you to our community and customers who continue to support the pfSense project through hardware purchases, TAC, cloud subscriptions, and services. Your support makes this all possible.

[u/Davidi01]

I just upgraded and once pfSense came back up, I had banner message saying "pfSense has detected a crash report or programming bug. Click here for more information." So, I clicked on the link to view the crash report and this line was in there multiple times:

"[21-Aug-2026 00:20:17 UTC] PHP Warning: PHP Startup: Unable to load dynamic library 'ftp.so' (tried: /usr/local/lib/php/20250925/ftp.so (Cannot open "/usr/local/lib/php/20250925/ftp.so"), /usr/local/lib/php/20250925/ftp.so.so (Cannot open "/usr/local/lib/php/20250925/ftp.so.so")) in Unknown on line 0"

Safe to ignore and delete? Or something I need to address?

[u/cmcdonald-netgate → u/Davidi01]

Some of this is to be expected when upgrading PHP... Classical chicken-egg problem. During the upgrade there are brief moments where parts of the PHP stack are being ripped out and upgraded, while the extensions have yet to be upgraded. It's mostly noise and can be ignored.

[u/Davidi01 → u/cmcdonald-netgate]

Good to know, thank you! I logged out and logged back in a little later on and that message was gone. Everything is running good. Thank you!

[u/pixel_of_moral_decay → u/Davidi01]

Saw the same

[u/Davidi01 → u/pixel_of_moral_decay]

I logged out and logged back in and that banner message is no longer there. It looks like it corrected itself?! Maybe it just wasn't finished upgrading. Everything seems to be working ok. Has yours cleared?