IPFire is an open source Linux distribution primarily for routers and firewalls; it features a standalone firewall system with a web-based management console for configuration, and it supports the installation of add-ons to add more services.

IPFire 2.27 Core 172 is officially released, with encryption improvements for IPsec and OpenVPN, security improvements, as well as numerous package updates and various bug fixes.

IPFire 2.27 Core 172 updates the key length of host certificates for IPsec and OpenVPN clients/peers to 4096-bit RSA, as the previous default of 2048 bits is no longer recommended for long-term security purposes.

other:

• IPFire’s trust store has been updated to incorporate Mozilla’s decision not to trust the root certificate of TrustCor Systems S. DE RL
• OpenVPN CRLs (Certificate Revocation Lists) are now properly backed up and reloaded before OpenVPN (re)starts.
• Committed a large patchset to update Python
• Updated and improved language translations for the IPFire web interface
• linux-firmware Some unnecessary files in are no longer included and are automatically removed from existing installations to keep the system as lean as possible.
• As a defense-in-depth measure, various file permissions have been tightened
• Outdated gnu-netcat plugin has been abandoned

Package update:

• arm-trusted-firmware 2.7,bash 5.2, bind 9.16.35, conntrack-tools 1.4.7, curl 7.86.0, elinks 0.15.1, ethtool 6.0, expat 2.5.0, iana-etc 20221107, intel-microcode 20221108, iproute2 6.0.0, libedit 20221030-3.1, libhtp 0.5.42, libloc 0.9.15, libnetfilter_conntrack 1.0.9, libpng 1.6.39, libtasn1 4.19.0, libtiff 4.4.0, libuv 1.44.2, libxcrypt 4.4.33, libxml2 2.10.3, linux-firmware 20221109, memtest86+ 6.00, nano 7.0, OpenSSH 9.1p1, OpenSSL 1.1.1s, OpenVPN 2.5.8, poppler 22.11.0, python3 3.10.8, readline 8.2, sed 4.9, sqlite 3400000, strongswan 5.9.8, sudo 1.9.12p1, suricata 6.0.9, sysstat 12.7.1, tzdata 2022e, u-boot 2022.10, unbound 1.17.0, usbutils 015, vnstat 2.10, xz 5.2.8, zlib 1.2.13

Add-on update:

• cups-filters 1.28.16, ddrescue 1.26, dehydrated 0.7.1, fetchmail 6.4.34, ffmpeg 5.1.2, flac1.4.2, fmt 9.1.0, git 2.38.1, libassuan 2.5.5, libvirt 8.9.0, mpd 0.23.10, nginx 1.22.1, pcengines-apu-firmware 4.17.0.2, qemu 7.1.0, qemu-ga 7.1.0, rsync 3.2.7, samba 4.17.3, sdl2 2.26.0, Tor 0.4.7.12

For more details, please check: https://blog.ipfire.org/post/ipfire-2-27-core-update-172-released