OpenSIPS 3.6.8 ChangeLog

Released on August 19, 2026

OpenSIPS 3.6.8 is a maintenance release for the 3.6 branch, focused on parser and input hardening, TCP/core stability, dialog and B2B correctness, TLS verification behavior, module fixes and refreshed build, CI and documentation support.

This release includes several defensive fixes for malformed or oversized input, including multipart bodies, PUBLISH ETags, SDP connection lines, ENUM ISN users and XCAP URI normalization input. Upgrade from earlier 3.6 releases is strongly recommended.

This changelog summarizes the user-visible changes from 3.6.7..3.6.8, covering 145 non-merge commits. Generated documentation bulk output and release mechanics are summarized rather than listed commit by commit.

Core and TCP Stability

  • Destroyed TCP connections before module cleanup during shutdown. 2a7a46cdab
  • Ensured TCP connection IDs remain unique across reused descriptors. 3167b1dc8d
  • Fixed a sockets_mgm race in receive_fd that could trigger an infinite reload loop. 1ef0df8dfa
  • Skipped OpenSSL cleanup when the TCP file descriptor is already invalid. 58804365f3
  • Allowed auto-scaled processes to refresh themselves with the latest reload configuration. bee7bf4358
  • Added standalone M4 configuration examples. 25f02ef194

Input Hardening and Parser Safety

  • Handled empty multipart bodies in the SIP message translator. 3350b02049
  • Rejected overlong PUBLISH ETags in pua. cb67c69b2c
  • Bounded SDP connection line insertion in mediaproxy. b75daf24e4
  • Rejected overlong ENUM ISN R-URI users. 67254fe7cc
  • Rejected overlong XCAP SIP URI normalization input. 50dcd41b00

Dialog, B2B and Media Handling

  • Matched dialog legs by transaction branch to avoid selecting the wrong leg. 4ec5224d54
  • Fixed SIPREC dialog callback reference ownership. 7699415668
  • Fixed a b2b_logic lock leak and self-deadlock. e0a8db0982
  • Added dialog reference counting in b2b_entities. 7517cf02b7
  • Fixed possible invalid dialog access and cross-BYE concurrency in B2B flows. 3e3d9f29d6 fba47d3120
  • Prevented crashes when b2b_init() is called after async processing. 403aa5a713
  • Stored reply SDP as the current offer in dialog state. d901a20050
  • Properly populated RTP relay leg tags during parallel forking. 356254261a

Routing, Transactions and Registrar

  • Replicated AoRs with populated kv_storage in mid_registrar and usrloc. 8736733322
  • Fixed tm anycast replication return codes. 21a1fff759
  • Added transaction context for replicated CANCEL handling. 9c7125dcac
  • Fixed transaction context handling for Push Notification timeout 408 replies. 8832a4461d
  • Rejected a competing presence_callinfo line seize while the current seizure is still live. 02e6d7e0a5

TLS and Security Modules

  • Unified TLS verify mode selection across OpenSSL and wolfSSL backends. 5e99b31d1e
  • Fixed require_cert and verify_cert enforcement for virtual TLS domains. 5ae1eb7d7b
  • Fixed a STIR/SHAKEN package-memory leak for PASSporTs without ppt=shaken. 8e29c3a09b
  • Fixed aaa_diameter cJSON cleanup, including double-free handling and reply JSON release paths. 38ca45ab92 fefd8e4039

Module Fixes

  • Closed the database connection after configuration table checks. f9018bc6d5
  • Fixed cgrates unreferencing in error and concurrent BYE paths, and restored accounting context during dialog variable replication. ebe5021b6d 02dc674268
  • Initialized the optional MSRP relay authentication body. 51ad40a337
  • Supported both legacy and modern RabbitMQ headers in RabbitMQ modules. 51df657510 2bd3f7ec28
  • Removed a bogus RTPProxy warning when timeout notification is not used. befc3d56ed
  • Fixed UUID v7 builds on older systems and corrected UUID documentation. cd29c90990 387bee4483
  • Fixed a system-memory leak in mi_datagram. 9f6a73ebbf

Build, CI and Documentation