Download prerelease versions
Prerelease versions are builds from active development, published after significant bug fixes or when new features are added. They give you early access to what's coming and help us catch issues before a wider release. Please report anything you find!
Installing a prerelease version opts you into the prerelease update channel. You can switch back by installing a stable release or by changing the channel in the override configuration file for software_update.toml.
Verifying download integrity
To check the integrity of downloaded packages, download the following two files and follow the instructions in the .hashes.txt file.
| Integrity Check | ||
|---|---|---|
| littlesnitch-1.1.2-pre1.hashes.txt |  Download | 3.32 kB |
| littlesnitch-1.1.2-pre1.hashes.txt.sig.github.json | Download | 6.69 kB |
Release Notes
Little Snitch for Linux 1.1.2 Prerelease 1 (1010201)
This version is equivalent to the 1.1.1 stable release, but for those who are on the prerelease channel.
Changes since the 1.1.1-pre1 release:
Fixes
- Rules for "parent via unknown" connections. A connection may have a known parent process while the process that actually made the connection can't be identified. In this case, rules for the parent process are now also applied in the kernel filter.
- "via Not Identified" group. These connections now get their own group in the connection list, titled "Parent via Not Identified". Before, they were mixed in with the parent's direct connections.
- Invalid process paths. A process path that resolves to the root directory or an empty string is now shown as an unidentified process, instead of appearing as an executable named
/. This applies to new connections and to connections loaded from the history database.
Security
- Updated the bundled dependencies. This brings in security fixes for rustls (0.23.41 → 0.23.46), including CVE-2026-111943. This fixes TLS certificate verification to reject the distrusted emSign intermediate certificates. Previously, an attacker in a position to intercept network traffic could have tampered with blocklist downloads or the update check.