From mboxrd@z Thu Jan 1 00:00:00 1970 From: The IPFire Project To: ipfire-announce@lists.ipfire.org Subject: IPFire 2.19 - Core Update 104 Date: Tue, 20 Sep 2016 19:52:59 +0100 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5689656396146739609==" List-Id: --===============5689656396146739609== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable http://www.ipfire.org/news/ipfire-2-19-core-update-104-released This is the official release announcement for IPFire 2.19 =E2=80=93 Core Upda= te 104. This update brings you a new kernel under the hood and a from scratch rewritt= en Guardian. Linux 3.14.79 The Linux kernel has been updated to version 3.14.79 and brings you various b= ug- fixes, stability improvements and supports more hardware. Guardian Gurdian is an Intrusion-Prevention-System that is hooked into Snort, the Intrusion Detection System. It reacts on reported events by blocking access f= or hosts where malicious traffic was detected to originate from. That enables IPFire to be a dynamic firewall and block any abuse or other unwanted behavio= ur automatically. Since the old implementation was quite old and rather limited, Stefan Schantl started a complete rewrite which is faster, more efficient in resource usage = and of course more reliable. If you want to use Gurdian, you will have to install the guardian add-on package. This Core Update updates Snort to version 2.9.8.2. Misc * The IPFire web user interface is hardened against a potential environment =C2=A0 variable injection attacked known under the name HTTPoxy. This was nev= er =C2=A0 possible to exploit in IPFire. * Dynamic DNS Updater =C2=A0 * Add support for DuckDNS =C2=A0 * Update URL for spdyn * OpenSSH has been updated to 7.3p1 which fixes various security issues * Updated packages: shadow 4.2.1, libarchive 3.2.1, libcap 2.25, acl 2.2.52, =C2=A0 iputils s20160308, curl 7.49.1, popt 1.16, pcre 8.39, acpid 2.0.26, wh= ich =C2=A0 2.21, libtiff 4.0.6, ntp 4.2.8p8, wget 1.18 * Correction of wrong spelled unit =E2=80=9Cbit=E2=80=9D Add-ons Updated * htop 2.0.2 * nano 2.6.1 * nginx 1.8.1 * p7zip fixes CVE-2016-2334, CVE-2016-2335 New packages * Indepently from this Core Update, libvirt has been released as a new add-on. =C2=A0 Read all about it on its IPFire Planet post [1]. * freeradius, console configuration only A note to all testers: Please reinstall the final update if you have not installed it from the testing tree within the last few days. During the time = of testing this update, the image has been changed and additional bugs have been fixed. We are currently crowdfunding a Captive Portal for IPFire [2] and would like = you to ask to check it out and support us! Please help us to support the work on IPFire Project with your donation [3]. [1]=C2=A0http://planet.ipfire.org/post/feature-spotlight-libvirt [2]=C2=A0http://wishlist.ipfire.org/wish/the-ipfire-captive-portal [3]=C2=A0http://www.ipfire.org/donate --===============5689656396146739609==--