[technique] debian ebtables ipv6-icmp bug#643594: fixed in ebtables 2.0.10.4-1

Laurent GUERBY laurent at guerby.net
Mer 6 Juin 20:38:14 CEST 2012


Bonsoir,

Un bug debian ouvert lors des travaux de tetaneutral.net
sur IPv6 vient d'être fixé :

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643594
http://chiliproject.tetaneutral.net/projects/tetaneutral/wiki/IPv6

Ca devrait simplifier un peu :

http://chiliproject.tetaneutral.net/projects/tetaneutral/wiki/Spoofing

Si quelqu'un a le temps de regarder :)

Merci a tous,

Laurent

-------- Forwarded Message --------
From: Debian Bug Tracking System <owner at bugs.debian.org>
Reply-to: 643594 at bugs.debian.org
To: Laurent GUERBY <laurent at guerby.net>
Subject: Bug#643594 closed by William Dauchy <wdauchy at gmail.com>
(Bug#643594: fixed in ebtables 2.0.10.4-1)
Date: Tue, 05 Jun 2012 18:21:07 +0000

This is an automatic notification regarding your Bug report
which was filed against the ebtables package:

#643594: ebtables: v2.0.10-1 wish for ipv6-icmp and security

It has been closed by William Dauchy <wdauchy at gmail.com>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact William Dauchy <wdauchy at gmail.com> by
replying to this email.


-- 
643594: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643594
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
email message attachment
-------- Forwarded Message --------
From: William Dauchy <wdauchy at gmail.com>
To: 643594-close at bugs.debian.org
Subject: Bug#643594: fixed in ebtables 2.0.10.4-1
Date: Tue, 05 Jun 2012 18:17:11 +0000

Source: ebtables
Source-Version: 2.0.10.4-1

We believe that the bug you reported is fixed in the latest version of
ebtables, which is due to be installed in the Debian FTP archive:

ebtables_2.0.10.4-1.debian.tar.gz
  to main/e/ebtables/ebtables_2.0.10.4-1.debian.tar.gz
ebtables_2.0.10.4-1.dsc
  to main/e/ebtables/ebtables_2.0.10.4-1.dsc
ebtables_2.0.10.4-1_amd64.deb
  to main/e/ebtables/ebtables_2.0.10.4-1_amd64.deb
ebtables_2.0.10.4.orig.tar.gz
  to main/e/ebtables/ebtables_2.0.10.4.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 643594 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
William Dauchy <wdauchy at gmail.com> (supplier of updated ebtables package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 24 May 2012 12:24:02 +0000
Source: ebtables
Binary: ebtables
Architecture: source amd64
Version: 2.0.10.4-1
Distribution: unstable
Urgency: low
Maintainer: Jochen Friedrich <jochen at scram.de>
Changed-By: William Dauchy <wdauchy at gmail.com>
Description: 
 ebtables   - Ethernet bridge frame table administration
Closes: 614919 643594
Changes: 
 ebtables (2.0.10.4-1) unstable; urgency=low
 .
   * New upstream release
     - "v2.0.10-1 wish for ipv6-icmp and security" (Closes: #643594).
   * packaging update:
     * use debhelper & compat version 9.
     * standards to 3.9.3
     - "ebtables may use modprobe, so it should recommend module-init-tools"
       (Closes: #614919)
     * missing cdbs build dependency
     * add hardening to debian rules.
     * init: add run level 1 to Default-Stop rule
   * patchworks:
     + refresh patches with new release
     + refresh patch headers
   * Adding myself as uploaders
   * Removing Jan Christoph Nordholz from uploaders
Checksums-Sha1: 
 5a5fed56ef102a9e96a12b56cbf9dc4e522c29b5 1793 ebtables_2.0.10.4-1.dsc
 907d3b82329e8fbb7aaaa98049732bd8dab022f9 103764 ebtables_2.0.10.4.orig.tar.gz
 635b8a81339d759572242f011f03aa69cab323a2 7299 ebtables_2.0.10.4-1.debian.tar.gz
 5ce2f9254aa1e27e12e57790ad7b7a3630ccb3e3 105654 ebtables_2.0.10.4-1_amd64.deb
Checksums-Sha256: 
 bfb4dc318e1aa6c53e1ab39a52a9b97c98082d102fc710c286486b61a1f10b08 1793 ebtables_2.0.10.4-1.dsc
 dc6f7b484f207dc712bfca81645f45120cb6aee3380e77a1771e9c34a9a4455d 103764 ebtables_2.0.10.4.orig.tar.gz
 614057ab1ec380a2a3e41b1654a0ec7809acfcb1e80ebce8aef914c67439ead5 7299 ebtables_2.0.10.4-1.debian.tar.gz
 d630ef7d8c7537ef3d0e7089fdfa7c1ced8a3cfc9f1196badcad6fdf60330835 105654 ebtables_2.0.10.4-1_amd64.deb
Files: 
 b864986497bb79cf3126b513bc72676e 1793 net optional ebtables_2.0.10.4-1.dsc
 506742a3d44b9925955425a659c1a8d0 103764 net optional ebtables_2.0.10.4.orig.tar.gz
 926107e0a33da6ed88baaabcc3289f05 7299 net optional ebtables_2.0.10.4-1.debian.tar.gz
 1ccc0f19ac187cc3e7b8e11813403b4b 105654 net optional ebtables_2.0.10.4-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBCAAGBQJPzkqJAAoJEDNV9NY7WCHMhVIP/iKLgLckIdcgMLdHV2Rg7cVM
aJPuSAGXSj1yUTAqs67zit8jSlR8DwYwj00eHpB1dCSYIBuERvTJ9ss7oSZEigrG
HMdXZhlehCYELV3h8ZXTknAh6RFMTMmbTNeZln0RFgS0CjKU2f/PwFrlAcpEVv0W
vPpdwfoqBtJS47xmuBShEZvcDy0Rf2MKxHSW/7/2lp2V1LXK2/K8+MerRcUepFQ+
sB7pcsALFnEfJks28dLVJj6xfLlTYeaxxYOwy2Y39+yk7MKt8ZWiFFZfuKQi7hZQ
qS2QVOkPLvX14wQ4c9Jl8NDE5GzgMbHwcsNzqPNSl4mFlmukRr0zwHz5+vZ8eNGC
A5GLH4gu1nmENOMKQ7x2HFr5zll3GqjgEkRV4BjeISu2r41YCzdyZPVq99RpcWVJ
eVoBaqvD1JCcvmkUoD2hoInVJNVzK29UJ738FcvPMnr+7XhvUszLa7CR1bRnzrWx
WRNpgH3xEMmouIw4yQAPAs8D0fRSjkiDKsD9FI2MWL6u670jxg9wfmASN7/VwqXX
KXhq4UVSUAoOURMGQc1OMzs6801D4rCdxnvOXGr0DFMMj1kUtp4SiMFzx3/d34mi
6Gu9krRwTIMRFRWcYSN5A1Fwn/9bo+V+5sf+jWokH7R3rGD5EEPSr83TcqB7I3TN
bAv5a6+pKcT6jKlQiuPs
=f3IS
-----END PGP SIGNATURE-----


email message attachment
-------- Forwarded Message --------
From: Laurent GUERBY <laurent at guerby.net>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: ebtables: v2.0.10-1 wish for ipv6-icmp and security
Date: Tue, 27 Sep 2011 23:19:13 +0200

Subject: ebtables: v2.0.10-1 wish for ipv6-icmp and security
Package: ebtables
Severity: wishlist

*** Please type your report below this line ***
http://lwn.net/Articles/451189/
mentions for 2.0.10-1 release:

* incorporate fixes for possible issues found by Coverity analysis 
(thanks to Jiri Popelka)
* extend ebt_ip6 to allow matching on ipv6-icmp types/codes (by Florian 
Westphal)

The first item is a fix which might have security implications and the
second item would be really helpful when securing a debian
system running virtual machines with IPv6 enabled, for example
to prevent ICMPv6 spoofing.

-- System Information:
Debian Release: 6.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash





-------------- section suivante --------------
Un message encapsulé a été nettoyé...
De: William Dauchy <wdauchy at gmail.com>
Objet: Bug#643594: fixed in ebtables 2.0.10.4-1
Date: Tue, 05 Jun 2012 18:17:11 +0000
Taille: 5881
URL: <http://lists.tetaneutral.net/pipermail/technique/attachments/20120606/5d9a65a2/attachment.eml>
-------------- section suivante --------------
Un message encapsulé a été nettoyé...
De: Laurent GUERBY <laurent at guerby.net>
Objet: ebtables: v2.0.10-1 wish for ipv6-icmp and security
Date: Tue, 27 Sep 2011 23:19:13 +0200
Taille: 2561
URL: <http://lists.tetaneutral.net/pipermail/technique/attachments/20120606/5d9a65a2/attachment-0001.eml>


Plus d'informations sur la liste de diffusion technique