Re: "[FLSA-2005:2252] Updated iptables packages resolve security issues" introduces new bug

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2005-02-20 at 09:29 +0200, Pekka Savola wrote:
> That is, the whole purpose of the Fedora Legacy security update _was_ 
> to fix the automatic loading of modules.  If this doesn't work... we 
> have a problem.
> 

ip_nat_ftp and ip_conntrack_ftp never load by themselves. They have to
be manually loaded. The problem here, is we upgraded the iptables
version to the newer version that Red Hat released for rh 7.3 instead of
just patching the current version. The newer version has an updated init
script. The new init script explicitly unloads all loaded modules at
startup. This changes the previous rh9 behaviour. If people were loading
the modules manually before the init script came up, the update
essentially broke their firewall.

Another case that proves backporting is better than updating versions...

Do you guys have any bugs besides your modules not loading anymore?

Marc.

Attachment: signature.asc
Description: This is a digitally signed message part

--

fedora-legacy-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-legacy-list

[Index of Archives]     [Fedora Development]     [Fedora Announce]     [Fedora Legacy Announce]     [Fedora Config]     [PAM]     [Fedora General Discussion]     [Big List of Linux Books]     [Gimp]     [Yosemite Questions]

  Powered by Linux