Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1200519 > unrolled thread

Bug#1072983: bookworm-pu: package golang-github-google-nftables/0.1.0-4~deb12u1

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1072983: bookworm-pu: package golang-github-google-nftables/0.1.0-4~deb12u1 Cyril Brulebois <cyril@debamax.com> - 2024-06-11 11:40 +0200
    Bug#1072983: bookworm-pu: package golang-github-google-nftables/0.1.0-4~deb12u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2024-06-15 17:10 +0200
      Bug#1072983: bookworm-pu: package golang-github-google-nftables/0.1.0-4~deb12u1 Cyril Brulebois <cyril@debamax.com> - 2024-06-16 01:50 +0200
    Bug#1072983: golang-github-google-nftables 0.1.0-4~deb12u1 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2024-06-16 22:00 +0200

#1200519 — Bug#1072983: bookworm-pu: package golang-github-google-nftables/0.1.0-4~deb12u1

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian.org@packages.debian.org
Usertags: pu
X-Debbugs-Cc: golang-github-google-nftables@packages.debian.org
Control: affects -1 + src:golang-github-google-nftables

Hi,

[ Reason ]

I'd like to fix the #1071247/#1071248 pair in bookworm, which results in
crowdsec-firewall-bouncer's being broken on little-endian architectures
(addresses are getting logged just fine, but they're not passed over
correctly to the firewall layer). 

I've checked with the security team, this doesn't warrant a DSA.

This is the library part (golang-github-google-nftables).

[ Impact ]

If the fix doesn't make it into stable, crowdsec-firewall-bouncer
remains broken on little-endian architectures.

[ Tests ]

Same checks as for unstable when I uploaded the fixes there:
 - amd64 (LE, baremetal) before: KO
 - amd64 (LE, baremetal) after: OK
 - s390x (BE, debvm) before: OK
 - s390x (BE, debvm) after: OK

[ Risks ]

Except for a possible regression on s390x (which isn't the case, see
previous section), it cannot be worse than it currently is.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in stable
  [x] the issue is verified as fixed in unstable

Additionally, that reached testing.

[ Changes ]

The fix is a direct backport from upstream, which adds byte order
information to the function used by crowdsec-firewall-bouncer
(AddSet).

[ Other info ]

Next bug report is the crowdsec-firewall-bouncer part.


Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

[toc] | [next] | [standalone]

#1200988

Control: tags -1 + confirmed

On Tue, 2024-06-11 at 11:29 +0200, Cyril Brulebois wrote:
> I'd like to fix the #1071247/#1071248 pair in bookworm, which results
> in
> crowdsec-firewall-bouncer's being broken on little-endian
> architectures
> (addresses are getting logged just fine, but they're not passed over
> correctly to the firewall layer). 

Please go ahead.

Regards,

Adam

[toc] | [prev] | [next] | [standalone]

#1201056

[Multipart message — attachments visible in raw view] — view raw

Hi Adam,

Adam D. Barratt <adam@adam-barratt.org.uk> (2024-06-15):
> Please go ahead.

Thanks, uploaded.

Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

[toc] | [prev] | [next] | [standalone]

#1201239 — Bug#1072983: golang-github-google-nftables 0.1.0-4~deb12u1 flagged for acceptance

package release.debian.org
tags 1072983 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: golang-github-google-nftables
Version: 0.1.0-4~deb12u1

Explanation: fix AddSet() function on little-endian architectures

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web