14 DAY TRIAL // The development team behind the IPFire professional and hardened Linux firewall distribution announced the release of the IPFire 2.19 Core Update 116 software patch, which addresses several security issues.
Coming only a few days after the Core Update 115 release, which introduced a new IPFire Captive Portal allowing for easy access control of wireless and wired networks, along with updated OpenVPN configuration options, the IPFire 2.19 Core Update 116 release patches important security vulnerabilities.
For starters, the update bumps the OpenSSL version to 1.0.2m, a release that addresses two security flaws affecting modern AMD Ryzen and Intel Broadwell processors, as well as certificate data. More details about the two vulnerabilities are available at CVE-2017-3736 and CVE-2017-3735.
"The OpenSSL project released version 1.0.2m and issued two security advisories in the last week. The two vulnerabilities that were discovered were of moderate and low security, but we have decided to ship you this update as soon as possible," reads the release announcement.
Wget, Apache, Snort, and XZ also get new updates
Also implemented in the IPFire 2.19 Core Update 116 software update are new versions of the GNU Wget, Apache, Snort, and XZ components, patching bugs and security vulnerabilities that allowed attackers to execute arbitrary code. The new versions are GNU Wget 1.19.2, Apache 2.4.29, Snort 2.9.11, and XZ 5.2.3.
Users running IPFire 2.19 on their machines are urged to update to Core Update 116 as soon as possible. The development team recommends users to reboot their IPFire systems after installing this software update. If you want to deploy IPFire on new systems, you can download the IPFire 2.19 Core Update 116 installable ISO image.
IPFire is an open-source project supported on 64-bit (x86_64), 32-bit (i586), and ARM hardware, and it's free to use. Besides using the firewall functionality, IPFire can also be used as a VPN gateway or a proxy server. Check out the official website or our in-depth review to get started with IPFire, the best Linux-based firewall distribution.