Ubuntu

linux-image-2.6.32-302-ec2 is missing iptables module xt_recent

Reported by Henk Jan Agteresch on 2010-03-05
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-ec2 (Ubuntu)
Low
John Johansen

Bug Description

linux-image-2.6.32-302-ec2 is missing iptables module xt_recent

grep RECENT /boot/config-2.6.32-302-ec2
# CONFIG_NETFILTER_XT_MATCH_RECENT is not set

Related branches

CVE References

Scott Moser (smoser) wrote :

For reference, ubuntu-server kernel:

$ uname -r
2.6.32-17-server
$ grep MATCH_RECENT /boot/config-$(uname -r)
CONFIG_NETFILTER_XT_MATCH_RECENT=m
# CONFIG_NETFILTER_XT_MATCH_RECENT_PROC_COMPAT is not set

So, in "normal" ubuntu-server kernel, this is set.

Changed in linux-ec2 (Ubuntu):
importance: Undecided → Low
status: New → Confirmed
Andy Whitcroft (apw) on 2010-04-14
Changed in linux-ec2 (Ubuntu):
status: Confirmed → Fix Committed
assignee: nobody → John Johansen (jjohansen)
Launchpad Janitor (janitor) wrote :
Download full text (13.1 KiB)

This bug was fixed in the package linux-ec2 - 2.6.32-305.9

---------------
linux-ec2 (2.6.32-305.9) lucid; urgency=low

  [ Andy Whitcroft ]

  * rebase to Ubuntu-2.6.32-21.31
  * SAUCE: xen -- TSC is not available under XEN

  [ John Johansen ]

  * [Config] enable NETFILTER_XT_MATCH_RECENT for ec2 kernels
    - LP: #532553

  [ Ubuntu: 2.6.32-21.31 ]

  * allow modules.builtin to be optional
  * d-i: add mpt2sas to the message-modules udeb
    - LP: #530361
  * SAUCE: Nouveau: Add quirk framework to disable acceleration
    - LP: #544088, #546393
  * SAUCE: Nouveau: Disable acceleration on MacBook Pros
    - LP: #546393
  * SAUCE: Nouveau: Disable acceleration on GeForce3 cards
    - LP: #544088
  * SAUCE: Nouveau: Disable acceleration on 6100 cards
    - LP: #542950
  * SAUCE: dma-mapping: Remove WARN_ON in dma_free_coherent
    - LP: #458201
  * SAUCE: sync before umount to reduce time taken by ext4 umount
    - LP: #543617
  * tipc: Fix oops on send prior to entering networked mode (v3)
    - CVE-2010-1187
  * KVM: x86 emulator: Add Virtual-8086 mode of emulation
    - LP: #561425
  * KVM: x86 emulator: fix memory access during x86 emulation
    - LP: #561425
  * KVM: x86 emulator: Check IOPL level during io instruction emulation
    - LP: #561425
  * KVM: x86 emulator: Fix popf emulation
    - LP: #561425
  * KVM: Fix segment descriptor loading
    - LP: #561425
  * KVM: VMX: Update instruction length on intercepted BP
    - LP: #561425
  * KVM: VMX: Use macros instead of hex value on cr0 initialization
    - LP: #561425
  * KVM: SVM: Reset cr0 properly on vcpu reset
    - LP: #561425
  * KVM: VMX: Disable unrestricted guest when EPT disabled
    - LP: #561425
  * KVM: x86: disable paravirt mmu reporting
    - LP: #561425
  * AppArmor: Fix put of unassigned ns if aa_unpack fails
  * AppArmor: Fix refcount bug when exec fails
    - LP: #562063
  * AppArmor: Take refcount on cxt->profile to ensure it remains a valid
    reference
    - LP: #367499
  * AppArmor: fix typo in scrubbing environment variable warning
    - LP: #562060
  * AppArmor: fix regression by setting default to mediate deleted files
    - LP: #562056
  * AppArmor: fix refcount order bug that can trigger during replacement
    - LP: #367499
  * AppArmor: Make sure to unmap aliases for vmalloced dfas before they are
    live
    - LP: #529288
  * AppArmor: address performance regression of replaced profile
    - LP: #549428
  * AppArmor: make the global side the correct type
    - LP: #562047
  * AppArmor: use the kernel shared workqueue to free vmalloc'ed dfas
  * sky2: add register definitions for new chips
    - LP: #537168
  * sky2: 88E8059 support
    - LP: #537168
  * net: Fix Yukon-2 Optima TCP offload setup
    - LP: #537168
  * net: Add missing TST_CFG_WRITE bits around sky2_pci_write
    - LP: #537168
  * sky2: print Optima chip name
    - LP: #537168
  * (Upstream) dell-laptop: defer dell_rfkill_update to worker thread
    - LP: #555261
  * drm/nv40: add LVDS table quirk for Dell Latitude D620
    - LP: #539730

  [ Ubuntu: 2.6.32-20.30 ]

  * Revert "(pre-stable) ACPI: EC: Allow multibyte access to EC"
    - LP: #561151

  [ Ubuntu: 2.6.32-20.29 ]

  * Revert ...

Changed in linux-ec2 (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers