---

IPFire 2.19 to Bring Tor 0.2.9.9 and OpenSSL 1.0.2k with New Security Fixes

The most important change included in this update appears to be support for the unbound 1.6.0 recursive and caching DNS resolver in the built-in DNS proxy, which will re-activate QNAME hardening and minimisation below NX domains. The change should also make IPFire check if a router drops DNS responses that are longer than a specific threshold. Unfortunately, this could also affect the performance of the DNS functionality, but at least it will keep it working in misconfigured environments. The IPFire 2.19 Core Update 109 maintenance update will also enable support for newer eMMC modules in the kernel and makes the backup script work reliably on all supported platforms.