IPFire 2.23 – Core Update 133 It is time for the next Core Update. Number 133! Another bug-fix release with many changes under the hood. As always, we recommend to install this update as soon as possible to benefit from the fixes and to help us keeping those coming and to support our developers, please donate now!
Toolchain Updates IPFire 2.23 – Core Update 133 many updates on the core libraries of the system. Various changes to our build systemare
This update brings many updates on the core libraries of the system. Various changes to our build systemare also helping us to build a more modern distribution, faster. The toolchain is now based on GCC 8.3.0, binutils 2.32 and glibc 2.29 which bring various bugfixes, performance improvements and some new features.
Although these might not be the most exciting changes, we recommend upgrading as soon as possible since this is essential hardening for backbone components of the user-space.
Disabling SMT – Intel’s Security Issues
Disabling SMT has also been fine-tuned. It is now also being disabled on systems that are vulnerable to “Foreshadow”. Probably all processors that are vulnerable to MDS are vulnerable to Foreshadow, too, so this won’t affect many systems, but it is more correct to do so.
Increasing throughput of the new Intrusion Prevention System
As announced before, we were working on increasing the throughput of the IPS. This is being shipped now with this update and integrates a library from Intel which is optimised to perform pattern matching very fast on huge data sets. Its name is hyperscan.
This library comes in multiple versions which are all shipped at the same time and is being compiled with support for various CPU instructions which are enabled when the hardware supports them. Those are for example AVX2, AVX and of course all of the SSE series.
By utilising those optimised instructions, the processor can process more data by executing only one instruction which is a lot faster. We are soon going to release benchmarks, but first tests have shown that larger systems are benefitting hugely from this and even some smaller embedded processors gain slightly.
This feature is automatically configured and will always be enabled when supported.
Another change on the IPS is coming from Tim Fitzgeorge who investigated that the IPS was occasionally dropping some packets which it was not meant to without logging. The rule generation was patched accordingly so that won’t happen any more and rules will automatically updated when installing this Core Update.
• A long-standing bug in adding fixed DHCP leases has been fixed. Those are now saved right away on the first click, but it is possible to edit the entry.
• An incorrect list of cipher suites was generated for IPsec connections when PFS was disabled. This updates fixes that and updates all connections with the correct settings.
• ddns: Some new provides have been added
• Package updates: bind 9.11.7, jansson 2.12, knot 2.8.2, linux-pam 1.3.1, monit 5.25.3, openssl1.1.1.c, rrdtool 1.7.2, squid 4.7, strongswan 5.8.0, wpa_supplicant 2.8
• tshark A CLI version of Wireshark which is like tcpdump, but has better support for decoding captured packets.
• hostapd has been updated to version 2.8 which fixes various security vulnerabilities and other bugs
• tor: some bugs that didn’t allow the service to start after the last update have been fixed
• wio: A problem which caused the IPFire system to unexpectedly shut down has been solved
• miau, an IRC bouncer, which was unmaintained since 2010 has been dropped
Fandomfare Gaming Entertainment no.1 source in, Gaming news, Live Game Streaming , PC Gaming & related Events E3, Gamecon and more, eSports event news and releases gaming technologies.
Fandomfare Gaming Entertainment Video Games | Game Reviews | Game Streaming |Linux Distribution | more than 20-year online gaming and following the gaming industry
Latest posts by JADIRI GAMER (see all)
Girls Ice Hockey: Fine performances/Games to watch
Caitlyn Caldon, East Catholic/Glastonbury/South Windsor (ETB): Caldon, a senior, stopped all 20 shots she faced as ETB blanked defending state champion New Canaan, 2-0, on Sunday at the Newington Ice Arena.
Demeri Carangelo, Hamden/Wilbur Cross/Sheehan/Lyman Hall: Carangelo had nine points in back-to-back wins. She had two goals and three assists in a 6-3 victory over the Branford co-op last Wednesday, and added two goals and two assists in an 8-2 win over Conard/Hall on Saturday.
Meghan Croyle, East Catholic/Glastonbury/South Windsor (ETB): Croyle had a goal and an assist as ETB shut out defending state champion New Canaan, 2-0, on Sunday at the Newington Ice Arena.
Megan Froehlich, West Haven/SHA: Froelich scored a goal and dished out three assists in West Haven/SHA’s 6-5 loss to New Canaan on Monday at the Darien Ice House.
Kaleigh Harden, New Canaan: Harden collected five points with a hat trick and two assists as the Rams edged West Haven/SHA 6-5 on Monday. Harden’s third goal was the game-winner with 6:25 remaining.
Photo: Dave Stewart / Hearst Connecticut Media
Sophia Mughal, Fairfield: Mughal had a hat trick in Fairfield’s 4-2 victory over the Wilton/Norwalk/McMahon co-op on Monday. The win secured an FCIAC tournament berth for Fairfield.
Taylor Nowak, West Haven/SHA: Nowak scored the 100th goal of her career and also had an assist in West Haven/SHA’s 6-5 loss to New Canaan on Monday.
Kelly Raymond, Darien: Raymond had a hat trick in the Blue Wave’s 7-0 shutout of Ridgefield/Danbury last Wednesday.
Reilly Sargolini, Hamden/Wilbur Cross/Sheehan/Lyman Hall: Sargolini had a natural hat trick in the Green Dragons’ 8-2 victory over Conard/Hall on Saturday. She started the scoring just 42 seconds into the game, and added two more goals in a span of 1:12 later in the first period. Sargolini also had an assist.
Jessica Ware, Greenwich: The Cardinals’ goalie collected 25 saves as Greenwich topped Darien 3-1 at Hamill Rink on Thursday. Ware, a senior, made nine on those stops in the third period.
GAMES TO WATCH
Guilford vs. West Haven/SHA at Webster Bank Arena, Friday, 4 p.m.: Two SCC teams kick off Connecticut Ice weekend. West Haven/SHA will look to rebound from its first loss of the season, while Guilford can boost its playoff chances with a win here.
Greenwich vs. Simsbury at Simsbury Farms Rink, Friday, 6:10 p.m.: A showdown between the top two teams in the state. Simsbury is 8-0 and in first place, with Greenwich second at 8-2.
Fairfield co-op vs. East Catholic co-op (ETB) at Veterans Memorial Ice Rink, Friday, 7:30 p.m.: Both teams are in the hunt for a state playoff berth and can pick up key points in this game. ETB is coming off a huge 2-0 win over New Canaan, while Fairfield is looking to bounce back from a 5-0 loss to Darien.
East Catholic co-op (ETB) vs. Conard/Hall at Veterans Memorial Rink, Saturday, 12:45 p.m.: A traditional northern rivalry between perennial contenders, this year’s match-up features an ETB team which has recently moved up in the standings against a Conard/Hall team which is still searching for its first win.
Suffield co-op vs. Simsbury at International Skating Center, Saturday, 6:20 p.m.: The second meeting in the last five days for the two CCC contenders. Simsbury won, 2-1, on Monday and goes for the sweep in its home ice.
New Canaan vs. Amity co-op at Astorino Rink, Tuesday, 4:30 p.m.: An FCIAC-SCC showdown. New Canaan won this meeting 8-1 last year but will face an Amity team which is 8-1-1 in its last 10 games.
Simsbury vs. Darien at Darien Ice House, Tuesday, 6:30 p.m.: A huge game in the race for a top seed in the state tournament. The two contenders could meet again in the state semis or final.
Avon co-op vs. West Haven/SHA at Bennett Rink, Tuesday, 8 p.m.: A strong West Haven/SHA team takes on the Avon co-op, which is just inside the 12-team playoff bubble.
— Dave Stewart