Release Notes

EnforceGate vX — 2026.57.1 (GD)

Codename: Slate Falcon · Released: 2026-09-11 · Channel: General Deployment

This release includes bug fixes and a few minor improvements. Recommended for production deployments.

Highlights

• Read engine and connector logs from one command. show log messages (alias show logging) tails the engine's log, the squid-connector's log, or both at once — previously the only log-reading command spoke only for the engine, and had no way to see the connector's log at all.
• show system logs now works correctly out of the box. It could previously misreport where the engine was actually logging to (claiming console or syslog when it was really a file, or vice-versa), and could reject a plain line count (show system logs 100) in the interactive CLI. Both are fixed.
• show feed names its source correctly. A feed delivered by automatic delivery is applied entirely in memory — the status display previously still named the on-disk drop-path file regardless, which read as a contradiction next to request feed reload correctly reporting nothing there to reload. It now states the real source, and points at request feed update when that's the command you actually want.

Upgrade notes

• No action required — every change above is a read-only introspection improvement.
• The squid-connector's log is picked up automatically for a co-located connector (the standard standalone deployment); no configuration is needed. Only set [logging].connector_file by hand if your connector logs somewhere non-standard.

EnforceGate vX — 2026.56.0 (GD)

Codename: Amber Kestrel · Released: 2026-08-29 · Channel: General Deployment

This release includes bug fixes and a few minor improvements. Recommended for production deployments.

Highlights

• Curated Domain Lists now on by default — automated feed delivery is enabled out of the box. A fresh install pulls the feed directly into memory within about 90 seconds of first boot; no local file or manual setup required.
• New eghost feed command — view live feed status, or turn automated delivery on/off (e.g. for air-gapped deployments).
• VM and ISO appliance images are fresher — the underlying host OS (including the kernel) is now fully synced to the current package set at build time, closing a gap where it could drift stale between releases. Bare-metal ISO builds were unaffected; virtual-machine images are the ones that benefit.

Upgrade notes

• No action required for the feed change — it activates automatically on upgrade for any license that includes the curated-feed entitlement.
• Operators wanting the previous manual-feed-only behavior should run eghost feed auto-update off after upgrading.

EnforceGate vX — 2026.55.2 (GD)

Codename: Cobalt Cicada · Released: 2026-08-26 · Channel: General Deployment

This release includes new features and security fixes. Upgrade is strongly recommended for all production deployments.

Highlights

• TLS terminator upgraded to Caddy 2.11.4 — resolves eight upstream Caddy security advisories.
• Smaller attack surface — vim and pip removed from the shipped images.
• Curated Domain Lists v2 (automated feed delivery) — The latest curated domain lists feed is now automatically downloaded after upgrade and install.
• New eghost license credentials command to set/rotate control-server credentials.

Security

• Caddy 2.10 → 2.11.4 — addresses CVE-2026-27585, -27587, -27588, -27589,-27590, -45692, -52845, -52846 (only one was reachable in EnforceGate's minimal configuration).
• pip removed from the captive-portal image (runtime never used it).
• vim removed from the appliance and toolbox (largest recurring sources of CVEs)

Upgrade notes

• Editors: use nano in the toolbox / BusyBox vi on the appliance.
• Portal: pip has been removed as deemed not necessary for operation.

Verify & deploy

Every artifact is signed. Before deploying, you can check the whole distribution using:
```bash
sha256sum -c SHA256SUMS # all files should report: OK
```
Also cosign signatures are provided to ensure files integrity using our public release key.