siosios
05-14-2024, 12:44 PM
It is time to test the upcoming release of IPFire 2.29 - Core Update 186. It comes with a refreshed kernel, experimental support for Btrfs, as well as various bug fixes.
A Fresh KernelThis update brings a refresh of the IPFire Kernel, based on Linux 6.6.30.
It has mitigations for the latest Register File Data Sampling (RFDS, CVE-2024-28746 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-28746)) in Intel processors and fixes issues with the CPU graph for processors when some virtual cores are offline. The Raspberry Pi has received support for CPU frequency scaling.
Experimental Support for BtrfsThis release introduces experimental support for Btrfs (https://www.ipfire.org/docs/roadmap/btrfs) in IPFire. Currently this has been implemented to test out what benefits IPFire could draw from this new design of a filesystem. It enables compression of all data it holds and allows to create snapshots which might become useful for the development process and enable easier rollbacks.
Misc.
Firewall Blocklists
Spamhaus EDROP has been merged into DROP (https://www.spamhaus.org/resource-hub/network-security/spamhaus-drop-and-edrop-to-become-a-single-list/). Users who had EDROP enabled will automatically have DROP enabled after installing this update.
The discontinued Alienvault list has been removed.
Suricata ha? been enabled to use Linux Landlock which is supposed to protect against any unauthorised file system access from exploits.
The Unbound/DHCP Leases bridge has been patched to avoid unnecessary reloads of Unbound. Thanks to Nick Howitt (https://n00bunlimited.net//users/nickh) for his first-time contribution.
Some unnecessary warnings during the boot process have been silenced.
Updated packages: Apache2 2.4.59, BIND 9.16.49, kmod 32, libhtp 0.5.48, SQLite 3.45.3, squid 6.9, strongSwan 5.9.14, Suricata 7.0.5, tzdata 2024a
Add-ons
Icinga has been removed, as announced in February (https://www.ipfire.org/blog/ipfire-2-29-core-update-183-released)
The broken sslh add-on has been removed
Updated packages: Bacula 13.0.4, dnsdist 1.9.3, Lynis 3.1.1, mympd 14.1.2, Tor 0.4.8.11
We Need Your Support!We are very happy to bring you all these exciting changes for IPFire that we have put so much effort in. Please help us to keep these coming by supporting our team with your donation (https://www.ipfire.org/donate).
More... (https://www.ipfire.org/blog/ipfire-2-29-core-update-186-is-available-for-testing)
A Fresh KernelThis update brings a refresh of the IPFire Kernel, based on Linux 6.6.30.
It has mitigations for the latest Register File Data Sampling (RFDS, CVE-2024-28746 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-28746)) in Intel processors and fixes issues with the CPU graph for processors when some virtual cores are offline. The Raspberry Pi has received support for CPU frequency scaling.
Experimental Support for BtrfsThis release introduces experimental support for Btrfs (https://www.ipfire.org/docs/roadmap/btrfs) in IPFire. Currently this has been implemented to test out what benefits IPFire could draw from this new design of a filesystem. It enables compression of all data it holds and allows to create snapshots which might become useful for the development process and enable easier rollbacks.
Misc.
Firewall Blocklists
Spamhaus EDROP has been merged into DROP (https://www.spamhaus.org/resource-hub/network-security/spamhaus-drop-and-edrop-to-become-a-single-list/). Users who had EDROP enabled will automatically have DROP enabled after installing this update.
The discontinued Alienvault list has been removed.
Suricata ha? been enabled to use Linux Landlock which is supposed to protect against any unauthorised file system access from exploits.
The Unbound/DHCP Leases bridge has been patched to avoid unnecessary reloads of Unbound. Thanks to Nick Howitt (https://n00bunlimited.net//users/nickh) for his first-time contribution.
Some unnecessary warnings during the boot process have been silenced.
Updated packages: Apache2 2.4.59, BIND 9.16.49, kmod 32, libhtp 0.5.48, SQLite 3.45.3, squid 6.9, strongSwan 5.9.14, Suricata 7.0.5, tzdata 2024a
Add-ons
Icinga has been removed, as announced in February (https://www.ipfire.org/blog/ipfire-2-29-core-update-183-released)
The broken sslh add-on has been removed
Updated packages: Bacula 13.0.4, dnsdist 1.9.3, Lynis 3.1.1, mympd 14.1.2, Tor 0.4.8.11
We Need Your Support!We are very happy to bring you all these exciting changes for IPFire that we have put so much effort in. Please help us to keep these coming by supporting our team with your donation (https://www.ipfire.org/donate).
More... (https://www.ipfire.org/blog/ipfire-2-29-core-update-186-is-available-for-testing)