Hello community, here is the log from the commit of package SuSEfirewall2 for openSUSE:Factory checked in at 2013-05-16 19:22:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/SuSEfirewall2 (Old) and /work/SRC/openSUSE:Factory/.SuSEfirewall2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "SuSEfirewall2" Changes: -------- --- /work/SRC/openSUSE:Factory/SuSEfirewall2/SuSEfirewall2.changes 2013-01-29 14:46:19.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.SuSEfirewall2.new/SuSEfirewall2.changes 2013-05-16 19:22:01.000000000 +0200 @@ -1,0 +2,12 @@ +Mon May 6 13:15:59 UTC 2013 - [email protected] + +- license update: GPL-2.0 + Various GPL-2.0 (only) licensed files + +------------------------------------------------------------------- +Fri May 3 13:25:35 UTC 2013 - [email protected] + +- clarify what the default is in FW_MASQ_NETS (bnc#817233) +- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719) + +------------------------------------------------------------------- Old: ---- SuSEfirewall2-3.6.302.tar.bz2 New: ---- SuSEfirewall2-3.6.304.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ SuSEfirewall2.spec ++++++ --- /var/tmp/diff_new_pack.Z4D2FU/_old 2013-05-16 19:22:03.000000000 +0200 +++ /var/tmp/diff_new_pack.Z4D2FU/_new 2013-05-16 19:22:03.000000000 +0200 @@ -18,7 +18,7 @@ Name: SuSEfirewall2 -Version: 3.6.302 +Version: 3.6.304 Release: 0 Url: http://en.opensuse.org/SuSEfirewall2 PreReq: %fillup_prereq %insserv_prereq /bin/sed textutils fileutils grep filesystem @@ -27,7 +27,7 @@ Requires: perl Requires: sysconfig Summary: Stateful Packet Filter Using iptables and netfilter -License: GPL-2.0+ +License: GPL-2.0 Group: Productivity/Networking/Security Source: SuSEfirewall2-%{version}.tar.bz2 BuildArch: noarch ++++++ SuSEfirewall2-3.6.302.tar.bz2 -> SuSEfirewall2-3.6.304.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/SuSEfirewall2-3.6.302/SuSEfirewall2 new/SuSEfirewall2-3.6.304/SuSEfirewall2 --- old/SuSEfirewall2-3.6.302/SuSEfirewall2 2013-01-29 09:04:56.000000000 +0100 +++ new/SuSEfirewall2-3.6.304/SuSEfirewall2 2013-05-02 16:41:38.000000000 +0200 @@ -1776,7 +1776,7 @@ if [ -n "$ipt_recent_update" ]; then ipt_recent_rcheck="-m recent --rcheck$ipt_recent_update" - ipt_recent_update="-m recent --update$ipt_recent_update --rttl" + ipt_recent_update="-m recent --update$ipt_recent_update" ipt_recent_set="-m recent --set$ipt_recent_set" fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/SuSEfirewall2-3.6.302/SuSEfirewall2.sysconfig new/SuSEfirewall2-3.6.304/SuSEfirewall2.sysconfig --- old/SuSEfirewall2-3.6.302/SuSEfirewall2.sysconfig 2013-01-29 09:04:56.000000000 +0100 +++ new/SuSEfirewall2-3.6.304/SuSEfirewall2.sysconfig 2013-05-02 16:41:38.000000000 +0200 @@ -180,6 +180,7 @@ # If the protocol is icmp then port is interpreted as icmp type # # Examples: - "0/0" unrestricted access to the internet +# This is also the default if you leave FW_MASQ_NETS empty. # - "10.0.0.0/8" allows the whole 10.0.0.0 network with # unrestricted access. # - "10.0.1.0/24,0/0,tcp,80 10.0.1.0/24,0/0,tcp,21" allows -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
