Softpedia >News >Linux >Linux Distributions
Softpedia Homepage   

IPFire 2.17 Core Update 92 Patches OpenSSL and Squid Security Vulnerabilities

Python 2.7.10, cURL 7.43.0, and Dnsmasq 2.73 were included

Jul 16, 2015 17:20 GMT  ·  By
IPFire's GeoIP-based blocking
   IPFire's GeoIP-based blocking

Michael Tremer from the IPFire project has announced the immediate availability for download of IPFire 2.17 Core Update 92, an important release that brings updated components and patches critical security vulnerabilities.

According to the release announcement, the 92nd update of the stable IPFire 2.17 firewall distribution updates the OpenSSL library to version 1.0.2d, patching a high-severity security vulnerability, and introduces a patched version of the Squid caching and forwarding web proxy to fix a security vulnerability.

"This is the official release announcement for IPFire 2.17 - Core Update 92. This update comes with various security fixes for the OpenSSL library and the squid web proxy server," says Michael Tremer. "You can support this project by getting involved into development, writing documentation, support fellow IPFire users or with your donation."

As mentioned, numerous packages have been updated in IPFire 2.17 Core Update 92, among which we can mention Python 2.7.10, cURL 7.43.0, Dnsmasq 2.73, conntrack-tools 1.4.2, rrdtool 1.5.3, as well as the libpcap 1.7.3, libgcrypt 1.63, libnetfilter_queue 1.0.2, libnetfilter_conntrack 1.0.4, libgpg-error 1.18, and libnfnetlink 1.0.1 libraries.

Moreover, libpcap 1.7.3 replaces the libusbx library, and the libnetfilter_cthelper library has been added. Many add-ons have been updated as well in IPFire 2.17 Core Update 92, such as TOR 0.2.6.9, Asterisk 11.18.0, Git 2.4.4, 7Zip 9.38.1, tcpdump 4.7.4, nano 2.4.1, PowerTOP 2.7, libassuan 2.2.0, and keepalived 1.2.17.

Several other issues have been resolved

Please note that the Git 2.4.4 update includes the perl-Net-SMTP-SSL, perl-Authen-SASL, and perl-MIME-Base64 modules for the "git send-email" command. Loading of languages in webaccess.cgi has been fixed, it is now possible to select the ESP group type for IPsec, and url-filter now uses the upstream proxy when downloading blacklists.

Last but not least, issues with the Network Address Translation (NAT) rules from the connections.cgi file related to empty destination IP address have been fixed. Download IPFire 2.17 Core Update 92 right now via Softpedia or directly from the project's website.