Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5256

Ferm default ruleset is wide open on ipv6

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701200

This is a serious issue, many providers these days assign a globally
routable ipv6 address to all systems.  Our users could be running on
systems they think are protected yet have every port exposed on ipv6
transport.

IMO this should be backported via a security release into current stable.
It's an extremely low-risk fix and would immediately provide additional
security to users using the default ruleset.

--Adam

Back to linux.debian.security | Previous | Next | Find similar | Unroll thread

Thread

Ferm default ruleset is wide open on ipv6 Adam McKenna <adam@flounder.net> - 2017-08-04 18:30 +0200

csiph-web