This update brings a wide range of package updates, new features, and security improvements across the board. We’re also shipping some significant bug fixes and enhancements to improve reliability and maintainability.
- This release rebases the IPFire kernel on Linux 6.12.23 which brings various security and stability fixes.
- Stephen Cuka has contributed a large update for the Pakfire page. The controls have been tidied up and made clearer and the translation of various languages has been improved.
- Firewall: Outgoing connections using an Alias IP address will not longer be NATed to the default IP address on RED
- The IPsec host certificate renewal process will now correctly update any internal files
- libidn has been replaced with libidn2 throughout the entire distribution
- Updated packages: abseil-cpp 20250127.0, BIND 9.20.8, ca-certificates 20250317, cairo 1.18.4, dbus 1.16.2, expat 2.7.1 which includes a fix for CVE-2024-8176, gdbm 1.25, gettext 0.24, harfbuzz 11.0.0, hwdata 0.393, iana-etc 20250311, iproute2 6.14.0, jansson 2.14.1, kmod 34.2, libarchive 3.7.9, libcap 2.75, libedit 20250104-3.1, libhtp 0.5.50, libseccomp 2.6.0, liburcu 0.15.1, libusb 1.0.28, libxml2 2.14.0, LVM2 2.03.31, mpfr 4.2.2, pango 1.56.3, procps 4.0.5, shadow 4.17.4, suricata 7.0.10, tzdata 2025b, util-linux 2.41, xz 5.8.1 which includes a fix for CVE-2025-31115
- Zabbix has been updated to 7.0.11 LTS. This is a major release update to the next LTS version and breaks compatibility with Zabbix Server 6.x.
- Updated add-ons:
- Bacula 15.0.2
- cifs-utils 7.3
- FFmpeg 7.1.1
- Git 2.49.0
- mpd 0.24.3
- mympd 20.1.2
- OVMF 2025.02-1
- Samba 4.22.0
We would love to hear your feedback on this Core Update—especially from those of you testing it early. Your input helps us catch issues faster and ensure that IPFire stays rock-solid for everyone. We're already working on some exciting new features and big improvements that we can't wait to share with you soon. As always, your donations are what make all of this possible. If you want to support our mission to build a secure and independent internet, please consider donating to the project. Every contribution makes a difference.