Your message dated Sat, 02 Apr 2016 14:22:42 +0100 with message-id <1459603362.2441.217.camel@adam-barratt.org.uk> and subject line Fix included in oldstable has caused the Debian Bug report #809687, regarding wheezy-pu: package iptables-persistent/0.5.7 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 809687: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809687 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: wheezy-pu: package iptables-persistent/0.5.7
- From: Jonathan Wiltshire <jmw@debian.org>
- Date: Sat, 02 Jan 2016 21:12:41 +0000
- Message-id: <20160102211241.4715.59679.reportbug@lupin.home.powdarrmonkey.net>
Package: release.debian.org Severity: normal Tags: wheezy User: release.debian.org@packages.debian.org Usertags: pu I would like to update iptables-persistent in wheezy to fix a minor information disclosure bug. A diff is attached. Thanks, -- System Information: Debian Release: 8.2 APT prefers stable APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'oldstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.3.0-0.bpo.1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)diff --git a/debian/changelog b/debian/changelog index a3ec0fe..2c467a2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +iptables-persistent (0.5.7+deb7u1) wheezy; urgency=medium + + * [062648] Stop rules files being world-readable. + Thanks to Bernhard Thaler (Closes: #764645) + + -- Jonathan Wiltshire <jmw@debian.org> Sat, 02 Jan 2016 21:00:01 +0000 + iptables-persistent (0.5.7) unstable; urgency=low * [e7534a] Fix bashism in debian/iptables-persistent.init. diff --git a/debian/iptables-persistent.init b/debian/iptables-persistent.init index c7be564..15ad315 100644 --- a/debian/iptables-persistent.init +++ b/debian/iptables-persistent.init @@ -61,6 +61,8 @@ save_rules() log_action_cont_msg " skipping IPv4 (no modules loaded)" elif [ -x /sbin/iptables-save ]; then log_action_cont_msg " IPv4" + touch /etc/iptables/rules.v4 + chmod 0640 /etc/iptables/rules.v4 iptables-save > /etc/iptables/rules.v4 if [ $? -ne 0 ]; then rc=1 @@ -74,6 +76,8 @@ save_rules() log_action_cont_msg " skipping IPv6 (no modules loaded)" elif [ -x /sbin/ip6tables-save ]; then log_action_cont_msg " IPv6" + touch /etc/iptables/rules.v6 + chmod 0640 /etc/iptables/rules.v6 ip6tables-save > /etc/iptables/rules.v6 if [ $? -ne 0 ]; then rc=1
--- End Message ---
--- Begin Message ---
- To: 767975-done@bugs.debian.org, 779670-done@bugs.debian.org, 787900-done@bugs.debian.org, 798091-done@bugs.debian.org, 798334-done@bugs.debian.org, 800877-done@bugs.debian.org, 801201-done@bugs.debian.org, 801317-done@bugs.debian.org, 801405-done@bugs.debian.org, 802371-done@bugs.debian.org, 802878-done@bugs.debian.org, 803387-done@bugs.debian.org, 803745-done@bugs.debian.org, 804159-done@bugs.debian.org, 804209-done@bugs.debian.org, 805216-done@bugs.debian.org, 805924-done@bugs.debian.org, 806166-done@bugs.debian.org, 806339-done@bugs.debian.org, 806724-done@bugs.debian.org, 807490-done@bugs.debian.org, 808901-done@bugs.debian.org, 809687-done@bugs.debian.org, 810761-done@bugs.debian.org, 812363-done@bugs.debian.org, 812881-done@bugs.debian.org, 813623-done@bugs.debian.org, 814544-done@bugs.debian.org, 814569-done@bugs.debian.org, 815613-done@bugs.debian.org, 816002-done@bugs.debian.org, 818007-done@bugs.debian.org, 818225-done@bugs.debian.org, 818531-done@bugs.debian.org, 818710-done@bugs.debian.org, 819202-done@bugs.debian.org, 819244-done@bugs.debian.org
- Subject: Fix included in oldstable
- From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
- Date: Sat, 02 Apr 2016 14:22:42 +0100
- Message-id: <1459603362.2441.217.camel@adam-barratt.org.uk>
Version: 7.10 Hi, The updates referenced in these bugs were included in today's wheezy point release. Regards, Adam
--- End Message ---