Security 10760 Published by

Arne Fitzenreiter has announced the release of IPFire 2.27 - Core Update 163 for testing. IPFire is a powerful and professional Open Source firewall solution.



IPFire 2.27 - Core Update 163 is available for testing 

Today, we are releasing the first Core Update of the year for testing. It comes with an improved Quality of Service based on CAKE and various bug fixes and a lot of package updates.

Everything is better with CAKE

CAKE is short for  Common Applications Kept Enhanced and is the successor of  CoDeL. It is an advanced queue management algorithm which aims to keep your internet connection snappy and fast.

CAKE comes with a couple of benefits over its predecessor of which requiring less CPU resources, more accurate bandwidth shaping due to working with bytes instead of packets the most important ones. In our experiments in the lab we have found no notable differences for fast lines, but there is a notable improvement of VoIP call quality on slower or saturated lines.

The Quality of Service in IPFire which used to be based on CoDel is now being based on CAKE. Any configuration will be automatically migrated. There are new options in the advanced settings which can be used to select any encapsulation of your internet connection which will help CAKE to more precisely estimate any overhead.

Misc.

  • Support for the i586 architecture has been  removed
  • Passwords for system accounts will now be hashed using YESCRYPT for improved security against brute-force attacks with rainbow tables
  • IPsec: Corrupted certificates after download have been fixed
  • Booting IPFire on Xen has been fixed
  • Updated packages: Apache 2.4.52, bash 5.1.12, cURL 7.80.0, e2fsprogs 1.46.5, ethtool 5.15, exfatprogs 1.1.3, freetype 2.11.0, glib 2.70.1, grep 3.7, gzip 1.11, igmpproxy 0.3, iproute2 5.15.0, libarchive 3.5.2, libcap 2.61, libedit 20210910-3.1, libgcrypt 1.9.4, libgpg-error 1.43, libloc 0.9.9, libtasn1 4.18.0, linux-firmware 20211216, m4 1.4.19, meson 0.60.1, ncurses 6.3, PAM 1.5.2, pango 1.50.0, perl-Date-Manip 6.86, perl-Unix-Syslog 1.1, perl-URI 5.09, poppler 21.11.0,qpdf 10.4.0,rng-tools 6.14, sdparm 1.12, shadow 4.9, SQLite 3.37.0, squid 4.16, sudo 1.9.8p2, sysvinit 3.00, unbound 1.14.0 wget 1.21.2, xfsprogs 5.14.2

Add-Ons

  • Updated packages: elfutils 0.186, gdb 11.1, Git 2.34.1, htop 3.1.2, libsolv 0.7.19, lynis 3.0.6, nano 6.0, pcengines-apu-firmware 4.15.0.1, QEMU 6.1.0, sdl2 2.0.18, socat 1.7.4.2, Tor 0.4.6.9


IPFire 2.27 - Core Update 163 is available for testing - The IPFire Blog