Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5256 > unrolled thread
| Started by | Adam McKenna <adam@flounder.net> |
|---|---|
| First post | 2017-08-04 18:30 +0200 |
| Last post | 2017-08-04 18:30 +0200 |
| Articles | 1 — 1 participant |
Back to article view | Back to linux.debian.security
Ferm default ruleset is wide open on ipv6 Adam McKenna <adam@flounder.net> - 2017-08-04 18:30 +0200
| From | Adam McKenna <adam@flounder.net> |
|---|---|
| Date | 2017-08-04 18:30 +0200 |
| Subject | Ferm default ruleset is wide open on ipv6 |
| Message-ID | <uaNE6-UD-23@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701200 This is a serious issue, many providers these days assign a globally routable ipv6 address to all systems. Our users could be running on systems they think are protected yet have every port exposed on ipv6 transport. IMO this should be backported via a security release into current stable. It's an extremely low-risk fix and would immediately provide additional security to users using the default ruleset. --Adam
Back to top | Article view | linux.debian.security
csiph-web