26.2.148.165 - July 2026, LTS

Note This release is for the following product models: Anywhere USB Plus, Connect IT 16/48, Connect EZ 2/4/4i/8/16/32/Mini/WS/TS.

PDF link

Release category: Mandatory

These release notes document the changes since the DAL LTS 26.2.147.125 release. There has been a number of enhancements, security fixes, and bug fixes.

Enhancements

A configurable Verizon APN push timeout has been added. The device will failback to use the custom and built-in APN lists after the timeout period has expired and no APN has been pushed down to the device.
The APN selection support has been updated to have a configurable option to allow the cached APN list to be skipped.
Support for the new Verizon 311-270 IMSI range has been added.
Support for RFC 8909/8910 Wi-Fi hotspot support, including DHCP option 114 for authentication, has been added.
Support for a notification when logging into the CLI when the device is not registered with Digi Remote Manager has been added.
The help text for the Configuration Maintenance > Erase Configuration section in the Web UI has been updated.
ca-certificates.crt permissions have been added to OpenSSL.

Security fixes

Package updates will include all security updates for the stated release, unless stated otherwise.

The Linux kernel has been updated to 6.18.32. (DAL-13168)
The OpenSSH package has been updated to v10.3p1 (DAL-12761)
- CVE-2025-61984 CVSS Score: 3.6 Low
- CVE-2025-61985 CVSS Score: 3.6 Low
- CVE-2026-35385 CVSS Score: 8.1 High
- CVE-2026-35386 CVSS Score: 8.1 High
- CVE-2026-35387 CVSS Score: 6.5 Medium
- CVE-2026-35388 CVSS Score: 2.5 Low
- CVE-2026-35414 CVSS Score: 8.1 High
The dnsmasq package has been updated to v2.92rel2 (DAL-13475)
- CVE-2026-4890 CVSS Score: 7.5 High
- CVE-2026-4891 CVSS Score: 5.3 Medium
- CVE-2026-4892 CVSS Score: 8.4 High
- CVE-2026-4893 CVSS Score: 5.3 Medium
- CVE-2026-5172 CVSS Score: 7.3 High
The expat package has been updated to v2.7.4 (DAL-12950)
- CVE-2026-25210 CVSS Score: 7.8 High
- CVE-2026-24515 CVSS Score: 2.5 Low
The OpenSSL package has been updated to patch CVE-2026-2673 (DAL-13169)
- CVE-2026-2673 CVSS Score: 6.5 Medium
The Coovachilli package has been updated to v1.8 (DAL-13274)

Bug fixes

An issue with Ethernet Bonding not working in the DAL 26 LTS release has been resolved. (DAL-13315)
The following IPsec issues have been resolved.
1. The IPsec tunnel being incorrectly reported as down when it is up and functional. (DAL-13249, DAL-13279)
2. IKE packets not being sent when renegotiating the IPsec tunnel interfaces has been resolved. (DAL-13213)
Digi Remote Manager will now display the connection type as Wi-Fi is the device is connected via a Wi-Fi interface. (DAL-13450)
An issue where the SIM slot was not being displayed on the Web UI Modem status page has been resolved. (DAL-13265)
An issue where large incorrect cellular Tx/Rx byte spikes were reported on Digi Remote Manager has been resolved. (DAL-13154)
An issue where LTE bands higher than 99 could not be configured under manual band selection has been resolved. (DAL-13555)
An issue with the Query State system data for two PSU devices has been resolved. (DAL-13697)