USG FLEX H Series - V1.39 Patch 0 Firmware Release

p4_greg

Just to follow up on this- the 'unexpected' upgrades we experienced were caused by our own settings….so not really unexpected I guess…

We had our Access Point upgrade policies set to 'stable', but most of our Firewall upgrade policies were set to 'latest'….so that is why many of them upgraded.

Zyxel_Melen

Hi @Erik

I split your question to this post:

https://community.zyxel.com/en/discussion/34066/tailscale-exit-node-issue-in-v1-39

Our agent will help to check this issue.

mMontana

Any disclosable and drafted ETA for 1.39 release to be defined "Stable"?

Bugs are resolved so… I'd like to know if and when I could consider these correction instated rather than expected.

mMontana

UP.

Zyxel_Melen

Hi @mMontana

Our team evaluate the stable firmware every half a year. The next period is about 2027 Q1. And the official firmware release period for H series currently is every quarter. Therefore, the fix will be included in V1.40, which will be released in 2026 Q4.

mMontana

May I assume that Zyxel suggests, for the automated updates, the Stable channel rather the Latest channel?

In case of vulnerability (and remediatory patch) anyway the deploy must be do manually?

Zyxel_Melen

Hi @mMontana

Just to clarify — we're not suggesting Stable over Latest for automated updates. Which channel to use is entirely up to the customer, based on their own needs for stability vs. new features. From Zyxel's side, we actually encourage customers to move to the Latest firmware, since it includes new features and fixes for bugs found in earlier releases.

On the vulnerability/date code firmware question: yes, that upload has to be done manually via the local GUI — it isn't something that gets pushed out through the automated Nebula update process.