Welcome to the first release announcement of the year. The IPFire development team has been very busy over the holidays and is bringing you the latest update for IPFire: IPFire 2.29 - Core Update 191. It comes yet again with a huge amount of package updates to keep your firewall up to date and IPFire the modern Linux OS that it is. The update also includes a number of smaller bug fixes and groundwork for some bigger changes that will be released over the next couple of updates.
Before we talk about the changes in detail, we would like to ask you to donate. We need your support to fund our work to keep IPFire your favourite firewall. So let's have a great start to the year and collect funds to plan our roadmap for the coming twelve months!
Changes in IPFire 2.29 - Core Update 191
- Firewall
- The Feodo Tracker Aggressive and Feodo IP lists has been removed. They include all IP addresses that have ever been detected as part of a botnet, or having been detected as part of a botnet in the past 30 days - even if the problem has been cleared up since. Both lists have very high false positive rates and Feodo does not recommend to use them for blocking but only provides them for research and historical purposes.
- The list of open connection has received a number of bug fixes where formerly the destination country was shown in an incorrect colour
- Phil Scar has updated the French translation on the firewall options page to make them more clear
- Backup: A problem has been resolved where sometimes a backup of an add-on package could not be restored
Package Updates
Core System
- abseil-cpp 20240722.0
- autoconf-archive 2024.10.16
- bash 5.2.37
- beep 1.4.12
- bridge-utils 1.7.1
- btrfs-progs 6.11
- c-ares 1.34.3
- cairo 1.18.2
- chkconfig 1.30
- conntrack-tools 1.4.8
- cURL 8.11.0
- elfutils 0.192
- expat 2.6.4
- freetype 2.13.3
- fribidi 1.0.16
- fuse 3.16.2
- gawk 5.3.1
- gdb 15.2
- glib 2.83.0
- GnuTLS 3.8.8
- harfbuzz 10.1.0
- hwdata 0.389
- i2c-tools 4.4
- iana-etc 20241024
- intel-microcode 20241112
- iproute2 6.11.0
- ipset 7.22
- iptables 1.8.11
- iputils 20240905
- json-c 0.18
- kmod 33
- knot 3.4.2
- krb5 1.21.3
- less 668
- libarchive 3.7.7
- libcap 2.73
- libedit 20240808-3.1
- libgpg-error 1.51
- libjpeg 3.0.4
- libnetfilter_conntrack 1.0
- libnl-3 3.11.0
- liboping 1.10.0
- libpcap 1.10.5
- libpipeline 1.5.8
- libtirpc 1.3.6
- libtool 2.5.4
- libuv 1.49.2
- libxml2 2.13.5
- lsof 4.99.4
- lvm2 2.03.28
- man 2.13.0
- memtest 7.20
- meson 1.6.0
- oath-toolkit 2.6.12
- openldap 2.6.8
- OpenSSL 3.4.0
- PAM 1.7.0
- pango 1.54.0
- pciutils 3.13.0
- perl-Imager 1.024
- pixman 0.44.0
- protobuf 28.3
- qpdf 11.9.1
- Ruby 3.3.6
- sudo 1.9.16p2
- sysstat 12.7.6
- sysvinit 3.11
- SQLite 3.47.0.200
- Suricata 7.0.8
- usbutils 018
- utfcpp 4.0.6
- vim 9.1.0886
- wget 1.25.0
- xfsprogs 6.11.0
- xz 5.6.3
Add-Ons
- alsa 1.2.13
- amazon-ssm-agent 3.3.1345.0
- aws-cli 1.36.15
- cifs-utils 7.1
- dnsdist 1.9.7
- elinks 0.17.1.1
- ffmpeg 7.1
- FreeRADIUS 3.2.6
- libtalloc 2.4.2
- libvirt 10.10.0
- libyajl has been removed since libvirt no longer depends on it
- libxxhash 0.8.3
- monit 5.34.3
- mympd 19.0.1
- rsync 3.4.1
- samba 4.21.2
- screen 5.0.0
- sshfs 3.7.3
- tftpd will no longer remove /var/tftpboot on uninstall
- Tor 0.4.8.13
- tshark 4.4.2
- zabbix-agentd 6.0.37 LTS
- Zabbix now also reports the IPS throughput and the count of blocked IP addresses by Guardian
As always, we recommend to install this update as soon as possible and reboot your firewall. Please don't forget to give back with your donation..