This bug was fixed in the package ufw - 0.36-7.1ubuntu1
---
ufw (0.36-7.1ubuntu1) hirsute; urgency=medium
* d/p/0015-set-default-policy-after-load.patch: fix boot stall on
iscsi/network root filesystem when starting ufw (LP: #1946804)
*
This bug was fixed in the package ufw - 0.36-6ubuntu1
---
ufw (0.36-6ubuntu1) focal; urgency=medium
* d/p/0012-set-default-policy-after-load.patch: fix boot stall on
iscsi/network root filesystem when starting ufw (LP: #1946804)
*
This bug was fixed in the package ufw - 0.36-0ubuntu0.18.04.2
---
ufw (0.36-0ubuntu0.18.04.2) bionic; urgency=medium
* d/p/0002-set-default-policy-after-load.patch: fix boot stall on
iscsi/network root filesystem when starting ufw (LP: #1946804)
*
Tested with Bionic, Focal, and Hirsute, with the test steps provided.
All good.
Bionic:
---
Before:
# dpkg -s ufw | grep Version:
Version: 0.36-0ubuntu0.18.04.1
# iptables -L ufw-user-input -n
Chain ufw-user-input (1 references)
target prot opt source destination
ACCEPT
Tested 0.36-0ubuntu0.18.04.2 on bionic. apt upgrade succeeded and after
reboot the firewall came up with the expected rules in the expected
order and I spot-checked allowed and deny traffic. I was able to verify
the this bug is fixed via the test steps.
** Tags removed: verification-needed-bionic
Tested 0.36-6ubuntu1 on focal. apt upgrade succeeded and after reboot
the firewall came up with the expected rules in the expected order. I
was able to verify the this bug is fixed via the test steps.
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You
Hello Derek, or anyone else affected,
Accepted ufw into hirsute-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/ufw/0.36-7.1ubuntu1 in
a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
Uploaded to H/F/B.
(debdiffs in bug 1946804)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1933117
Title:
ufw delete can confuse protocol-specific rule with otherwise
Verified test packages (ppa:mfo/lp1946804) for
the Hirsute, Focal, and Bionic releases.
...
Without the patch:
Chain ufw-user-input (1 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/00.0.0.0/0tcp dpt:22
ACCEPT tcp --
** Description changed:
+ [Impact]
+
+ * The deletion of a rule without the 'proto' field
+that has a similar rule *with* the 'proto' field
+might delete the wrong rule (the latter).
+
+ * This might cause services to be inaccessible or
+incorrectly allowed, depending on rule
** Also affects: ufw (Ubuntu Focal)
Importance: Undecided
Status: New
** Also affects: ufw (Ubuntu Hirsute)
Importance: Undecided
Status: New
** Also affects: ufw (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: ufw (Ubuntu Bionic)
Status:
** Tags added: seg sts-sponsor-mfo
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ufw in Ubuntu.
https://bugs.launchpad.net/bugs/1933117
Title:
ufw delete can confuse protocol-specific rule with otherwise matching
This bug was fixed in the package ufw - 0.36.1-1
---
ufw (0.36.1-1) unstable; urgency=medium
* New upstream release (LP: #1808463, LP: #1831186, LP: #1838764,
LP: #1556419, LP: #1933117). Drop the following (included upstream):
- 0002-fix-check-requirements.patch
-
** Also affects: ufw (Ubuntu)
Importance: Undecided
Status: New
** Changed in: ufw (Ubuntu)
Status: New => In Progress
** Changed in: ufw (Ubuntu)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of
14 matches
Mail list logo