IPFire, a free, open-source Linux-based hardened firewall designed to be deployed as a dedicated firewall/router system for protecting network environments, has issued IPFire 2.29 – Core Update 194, powered by kernel 6.12.23 LTS.
The Pakfire management interface has also significantly improved, becoming clearer and more intuitive. Controls have been reorganized, usability has been polished, and translations across various languages have been refined.
Moreover, this update addresses a key networking behavior. Outgoing connections that utilize Alias IP addresses will no longer undergo Network Address Translation to the default RED interface IP address. This eliminates confusion in log interpretations and ensures accurate network traffic monitoring.
Further improvements are evident in IPFire’s handling of IPsec certificates. The certificate renewal process has been corrected to ensure internal files are updated correctly, thus preventing disruptions due to outdated certificates.
Under the hood, the distribution has fully transitioned from libidn to libidn2, bringing comprehensive support for the modern IDNA2008 specification. In addition, BIND has moved up to version 9.20.8, introducing important DNSSEC enhancements.
Expat’s update to 2.7.1 addresses a critical XML parsing vulnerability, while xz 5.8.1 corrects a notable security issue. Suricata reaches version 7.0.10, adding advanced HTTP/3 detection capabilities and improved TLS fingerprinting.
Administrators should note that Zabbix has been updated to its new Long-Term Support version, 7.0.11. While this major release enhances performance and stability, it breaks backward compatibility with Zabbix Server 6.x., so users must plan migrations carefully to avoid disruptions.
Lastly, the extensive add-on ecosystem accompanying IPFire also receives important updates, including Bacula 15.0.2, FFmpeg 7.1.1, Git 2.49, and Samba 4.22.
For more information, see the announcement.
Core Update 194 is already available for download on IPFire’s website. Two build flavours cover the most common hardware: x86_64 and aarch64 for those needing a fresh install. Existing systems can be upgraded via IPFire’s web UI.
