Security 10808 Published by

Michael Tremer has announced the release of IPFire 2.27 - Core Update 163. IPFire is a powerful and professional Open Source firewall solution.



IPFire 2.27 - Core Update 163 released

It is time to release another Core Update for IPFire. It comes with an improved Quality of Service based on CAKE and various bug fixes and a lot of package updates.

Before we talk about what is new, I would like to ask you for your support. IPFire is a small team of people and like many of our open source friends, we’ve taken a hit this year and would like to ask you to help us out. Please follow the link below where your donation can help fund our continued development:  https://www.ipfire.org/donate.

Everything is better with CAKE

CAKE is short for  Common Applications Kept Enhanced and is the successor of  CoDeL. It is an advanced queue management algorithm which aims to keep your internet connection snappy and fast.

CAKE comes with a couple of benefits over its predecessor of which requiring less CPU resources, more accurate bandwidth shaping due to working with bytes instead of packets the most important ones. In our experiments in the lab we have found no notable differences for fast lines, but there is a notable improvement of VoIP call quality on slower or saturated lines.

The Quality of Service in IPFire which used to be based on CoDel is now being based on CAKE. Any configuration will be automatically migrated. There are new options in the advanced settings which can be used to select any encapsulation of your internet connection which will help CAKE to more precisely estimate any overhead.

Misc.

  • Support for the i586 architecture has been  removed
  • Passwords for system accounts will now be hashed using YESCRYPT for improved security against brute-force attacks with rainbow tables
  • IPsec: Corrupted certificates after download have been fixed
  • Booting IPFire on Xen has been fixed
  • Updated packages: Apache 2.4.52, bash 5.1.12, cURL 7.80.0, e2fsprogs 1.46.5, ethtool 5.15, exfatprogs 1.1.3, freetype 2.11.0, glib 2.70.1, grep 3.7, gzip 1.11, igmpproxy 0.3, iproute2 5.15.0, libarchive 3.5.2, libcap 2.61, libedit 20210910-3.1, libgcrypt 1.9.4, libgpg-error 1.43, libloc 0.9.9, libtasn1 4.18.0, linux-firmware 20211216, m4 1.4.19, meson 0.60.1, ncurses 6.3, PAM 1.5.2, pango 1.50.0, perl-Date-Manip 6.86, perl-Unix-Syslog 1.1, perl-URI 5.09, poppler 21.11.0,qpdf 10.4.0,rng-tools 6.14, sdparm 1.12, shadow 4.9, SQLite 3.37.0, squid 4.16, sudo 1.9.8p2, sysvinit 3.00, unbound 1.14.0 wget 1.21.2, xfsprogs 5.14.2

Add-Ons

  • Updated packages: elfutils 0.186, gdb 11.1, Git 2.34.1, htop 3.1.2, libsolv 0.7.19, lynis 3.0.6, nano 6.0, pcengines-apu-firmware 4.15.0.1, QEMU 6.1.0, sdl2 2.0.18, socat 1.7.4.2, Tor 0.4.6.9


IPFire 2.27 - Core Update 163 released