Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1200520 > unrolled thread

Bug#1072984: bookworm-pu: package crowdsec-firewall-bouncer/0.0.25-4~deb12u1

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1072984: bookworm-pu: package crowdsec-firewall-bouncer/0.0.25-4~deb12u1 Cyril Brulebois <cyril@debamax.com> - 2024-06-11 11:40 +0200
    Bug#1072984: bookworm-pu: package crowdsec-firewall-bouncer/0.0.25-4~deb12u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2024-06-15 17:00 +0200
      Bug#1072984: bookworm-pu: package crowdsec-firewall-bouncer/0.0.25-4~deb12u1 Cyril Brulebois <cyril@debamax.com> - 2024-06-16 01:50 +0200
    Bug#1072984: crowdsec-firewall-bouncer 0.0.25-4~deb12u1 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2024-06-16 22:00 +0200

#1200520 — Bug#1072984: bookworm-pu: package crowdsec-firewall-bouncer/0.0.25-4~deb12u1

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian.org@packages.debian.org
Usertags: pu
X-Debbugs-Cc: crowdsec-firewall-bouncer@packages.debian.org
Control: affects -1 + src:crowdsec-firewall-bouncer

Hi,

[ Reason ]

I'd like to fix the #1071247/#1071248 pair in bookworm, which results in
crowdsec-firewall-bouncer's being broken on little-endian architectures
(addresses are getting logged just fine, but they're not passed over
correctly to the firewall layer).

I've checked with the security team, this doesn't warrant a DSA.

This is the daemon part (crowdsec-firewall-bouncer).

[ Impact ]

If the fix doesn't make it into stable, crowdsec-firewall-bouncer 
remains broken on little-endian architectures.

[ Tests ]

Same checks as for unstable when I uploaded the fixes there:
 - amd64 (LE, baremetal) before: KO
 - amd64 (LE, baremetal) after: OK
 - s390x (BE, debvm) before: OK
 - s390x (BE, debvm) after: OK

[ Risks ]

Except for a possible regression on s390x (which isn't the case, see
previous section), it cannot be worse than it currently is.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in stable
  [x] the issue is verified as fixed in unstable

Additionally, that reached testing.

[ Changes ]

Since there were already binNMUs for this package in p-u, with different
versions, I decided to err on the side of caution, and to propose a new
revision with a versioned build-dep on golang-github-google-nftables's
binary package; alternatively this package could be binNMU'd within p-u
once golang-github-google-nftables is available in p-u.

[ Other info ]

Previous bug report is the golang-github-google-nftables part.


Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

[toc] | [next] | [standalone]

#1200982

Control: tags -1 + confirmed

On Tue, 2024-06-11 at 11:29 +0200, Cyril Brulebois wrote:
> I'd like to fix the #1071247/#1071248 pair in bookworm, which results
> in
> crowdsec-firewall-bouncer's being broken on little-endian
> architectures
> (addresses are getting logged just fine, but they're not passed over
> correctly to the firewall layer).

Please go ahead.

Regards,

Adam

[toc] | [prev] | [next] | [standalone]

#1201055

[Multipart message — attachments visible in raw view] — view raw

Hi Adam,

Adam D. Barratt <adam@adam-barratt.org.uk> (2024-06-15):
> Please go ahead.

Thanks, uploaded.

Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

[toc] | [prev] | [next] | [standalone]

#1201236 — Bug#1072984: crowdsec-firewall-bouncer 0.0.25-4~deb12u1 flagged for acceptance

package release.debian.org
tags 1072984 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: crowdsec-firewall-bouncer
Version: 0.0.25-4~deb12u1

Explanation: rebuild against golang-github-google-nftables version with fixed little-endian architecture support

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web