the last Core Update for this decade is finally available for testing! If you have a couple of hours free over the holidays, please help us out by installing it and sending us your feedback!
Improved Booting & Reconnecting
Dialup scripts have been cleaned up to avoid any unnecessary delays after the system has been handed a DHCP lease from the Internet Service Provider. This allows the system to reconnect quicker after loss of the Internet connection and booting up and connecting to the Internet is quicker, too.
Improvements to the Intrusion Prevention System
Various smaller bug fixes have been applied in this Core Update which makes our IPS a little bit better with every release. To take advantage of deeper analysis of DNS packets, the IPS is now informed about which DNS servers are being used by the system.
IPFire is configured as securely as possible. At the same time we focus on performance, too. For connections to the web user interface, we do not allow using CBC any more. This cipher mode is begin to crack and the more robust GCM is available.
Whenever an SSL/TLS connection is being established to the firewall, we used to prefer ChaCha20/Poly1305 as a cipher. Since AESNI is becoming and more and more popular even on smaller hardware, it makes sense to prefer AES. A vast majority of client systems support this as well which will allow to communicate faster with IPFire systems and save battery power.
- The microcode for Intel processors has been updated again to mitigate vulnerabilities from the last Core Update
- PC Engines APU LEDs are now controlled using the ACPI subsystem which is made possible using the latest BIOS version 188.8.131.52
- Captive Portal: Expired clients are now automatically removed
- Dynamic DNS: Support for NoIP.com has been fixed in
- Updated packages: Python 2.7.17,
readline8.0 (and compat version 6.3),
clamavhas been updated to 0.102.1 which include various security fixes
libvirthas been updated to version 5.6.0 for various bug fixes or feature enhancements and support for LVM has been enabled.
qemuhas been updated to 4.1.0
- Various others: