Bug#691411: unblock: uruk/20120608.1-1
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Hi,
Please unblock package uruk, which was just uploaded to
testing-proposed-updates.
Without this fix an upgrade from squeeze to wheezy will lead to
all IPv6-traffic being blocked.
unblock uruk/20120608.1-1
Here's the diff between uruk-20120608-1 as currently in testing and the
proposed one (debdiff uruk_20120608-1.dsc uruk_20120608.1-1.dsc) :
diff -Nru uruk-20120608/ChangeLog uruk-20120608.1/ChangeLog
--- uruk-20120608/ChangeLog 2012-06-08 16:01:32.000000000 +0200
+++ uruk-20120608.1/ChangeLog 2012-10-25 12:53:27.000000000 +0200
@@ -1,3 +1,13 @@
+2012-10-25 Joost van Baal-Ilić
+
+ * uruk/script/uruk: Apply patch contributed by Thijs Kinkhorst in
+ Message-Id: <1350907287-15481-1-git-send-email-thijs@uvt.nl>: Uruk
+ implemented RFC 4890 section 4.3: Recommendations for ICMPv6 Transit
+ Traffic. However uruk is used in some (many?) cases not as a transit
+ firewall but as a host firewall for destination entities. Therefore,
+ also the recommentations from section 4.4: Recommendations for
+ ICMPv6 Local Configuration Traffic need to be added.
+
2012-06-08 Joost van Baal-Ilić
* uruk/TODO, uruk/script/uruk: No longer block, but allow ICMPv6
diff -Nru uruk-20120608/configure uruk-20120608.1/configure
--- uruk-20120608/configure 2012-06-08 16:01:34.000000000 +0200
+++ uruk-20120608.1/configure 2012-10-25 12:56:03.000000000 +0200
@@ -586,8 +586,8 @@
# Identity of this package.
PACKAGE_NAME='Uruk'
PACKAGE_TARNAME='uruk'
-PACKAGE_VERSION='20120608'
-PACKAGE_STRING='Uruk 20120608'
+PACKAGE_VERSION='20120608.1'
+PACKAGE_STRING='Uruk 20120608.1'
PACKAGE_BUGREPORT='joostvb-uruk@mdcc.cx'
PACKAGE_URL=''
@@ -1201,7 +1201,7 @@
# Omit some internal or obsolete options to make the list less imposing.
# This message is too long to be a string in the A/UX 3.1 sh.
cat <<_ACEOF
-\`configure' configures Uruk 20120608 to adapt to many kinds of systems.
+\`configure' configures Uruk 20120608.1 to adapt to many kinds of systems.
Usage: $0 [OPTION]... [VAR=VALUE]...
@@ -1267,7 +1267,7 @@
if test -n "$ac_init_help"; then
case $ac_init_help in
- short | recursive ) echo "Configuration of Uruk 20120608:";;
+ short | recursive ) echo "Configuration of Uruk 20120608.1:";;
esac
cat <<\_ACEOF
@@ -1334,7 +1334,7 @@
test -n "$ac_init_help" && exit $ac_status
if $ac_init_version; then
cat <<\_ACEOF
-Uruk configure 20120608
+Uruk configure 20120608.1
generated by GNU Autoconf 2.69
Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1357,7 +1357,7 @@
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
-It was created by Uruk $as_me 20120608, which was
+It was created by Uruk $as_me 20120608.1, which was
generated by GNU Autoconf 2.69. Invocation command line was
$ $0 $@
@@ -2175,7 +2175,7 @@
# Define the identity of the package.
PACKAGE='uruk'
- VERSION='20120608'
+ VERSION='20120608.1'
cat >>confdefs.h <<_ACEOF
@@ -2773,7 +2773,7 @@
# report actual input values of CONFIG_FILES etc. instead of their
# values after options handling.
ac_log="
-This file was extended by Uruk $as_me 20120608, which was
+This file was extended by Uruk $as_me 20120608.1, which was
generated by GNU Autoconf 2.69. Invocation command line was
CONFIG_FILES = $CONFIG_FILES
@@ -2826,7 +2826,7 @@
cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
ac_cs_version="\\
-Uruk config.status 20120608
+Uruk config.status 20120608.1
configured by $0, generated by GNU Autoconf 2.69,
with options \\"\$ac_cs_config\\"
diff -Nru uruk-20120608/debian/changelog uruk-20120608.1/debian/changelog
--- uruk-20120608/debian/changelog 2012-06-12 16:38:24.000000000 +0200
+++ uruk-20120608.1/debian/changelog 2012-10-25 13:49:39.000000000 +0200
@@ -1,3 +1,9 @@
+uruk (20120608.1-1) testing-proposed-updates; urgency=low
+
+ * New upstream release, for Debian "wheezy".
+
+ -- Joost van Baal-Ilić <joostvb@debian.org> Thu, 25 Oct 2012 13:26:34 +0200
+
uruk (20120608-1) unstable; urgency=low
* New upstream release: The Hooidonk Release.
diff -Nru uruk-20120608/NEWS uruk-20120608.1/NEWS
--- uruk-20120608/NEWS 2012-06-08 16:01:05.000000000 +0200
+++ uruk-20120608.1/NEWS 2012-10-25 12:52:04.000000000 +0200
@@ -2,6 +2,17 @@
Refer to ChangeLog for detailed per-file info.
+uruk version 20120608.1 - released October 25, 2012, for Debian "wheezy"
+
+- uruk/script/uruk: Fix IPv6 firewalling in case uruk is used on a host (not
+ transit) firewall by applying patch contributed by Thijs Kinkhorst: "Uruk
+ implemented RFC 4890 section 4.3: Recommendations for ICMPv6 Transit
+ Traffic. However uruk is used in some (many?) cases not as a transit firewall
+ but as a host firewall for destination entities. Therefore, also the
+ recommentations from section 4.4: Recommendations for ICMPv6 Local
+ Configuration Traffic need to be added."
+
+
uruk version 20120608 - The Hooidonk Release
- uruk/script/uruk: No longer block, but allow ICMPv6 type 137 Redirect Message
diff -Nru uruk-20120608/script/uruk uruk-20120608.1/script/uruk
--- uruk-20120608/script/uruk 2012-06-08 15:53:44.000000000 +0200
+++ uruk-20120608.1/script/uruk 2012-10-25 12:46:53.000000000 +0200
@@ -388,7 +388,22 @@
144 \
145 \
146 \
- 147
+ 147 \
+ router-solicitation \
+ router-advertisement \
+ neighbour-solicitation \
+ neighbour-advertisement \
+ 141 \
+ 142 \
+ 130 \
+ 131 \
+ 132 \
+ 143 \
+ 148 \
+ 149 \
+ 151 \
+ 152 \
+ 153
do
$ip6tables -A INPUT --protocol icmpv6 --icmpv6-type $type -j ACCEPT
done
diff -Nru uruk-20120608/VERSION uruk-20120608.1/VERSION
--- uruk-20120608/VERSION 2012-06-08 16:01:32.000000000 +0200
+++ uruk-20120608.1/VERSION 2012-10-25 12:53:53.000000000 +0200
@@ -1 +1 @@
-20120608
+20120608.1
diff -Nru uruk-20120608/VERSION.m4 uruk-20120608.1/VERSION.m4
--- uruk-20120608/VERSION.m4 2012-06-08 16:01:32.000000000 +0200
+++ uruk-20120608.1/VERSION.m4 2012-10-25 12:54:12.000000000 +0200
@@ -1 +1 @@
-m4_define([AD1_VERSION], [20120608])
+m4_define([AD1_VERSION], [20120608.1])
Reply to: