| 2020-04-02 07:56:17 |
Andy Whitcroft |
bug |
|
|
added bug |
| 2020-04-02 07:59:57 |
Andy Whitcroft |
description |
Resync our backports of wireguard and wireguard-linux-compat in eoan. wireguard userspace passes an uninitialised netlink field to the kernel which could lead to unpredictable behaviour. |
Resync our backports of wireguard and wireguard-linux-compat in eoan. wireguard userspace passes an uninitialised netlink field to the kernel which could lead to unpredictable behaviour. wireguard-linux-compat update fixes source nat handling amongst other fixes.
Note these will also want to go via the security PPA so they can be released to eoan-security. This is to ensure the previous update is available to -security only users. |
|
| 2020-04-02 08:00:09 |
Andy Whitcroft |
wireguard (Ubuntu): importance |
Undecided |
Medium |
|
| 2020-04-02 08:00:10 |
Andy Whitcroft |
wireguard (Ubuntu): assignee |
|
Andy Whitcroft (apw) |
|
| 2020-04-02 08:00:11 |
Andy Whitcroft |
wireguard (Ubuntu): status |
New |
In Progress |
|
| 2020-04-02 08:00:17 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Eoan |
|
| 2020-04-02 08:00:17 |
Andy Whitcroft |
bug task added |
|
wireguard (Ubuntu Eoan) |
|
| 2020-04-02 08:00:30 |
Andy Whitcroft |
bug task added |
|
wireguard-linux-compat (Ubuntu) |
|
| 2020-04-02 08:00:39 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu): status |
New |
In Progress |
|
| 2020-04-02 08:00:42 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu): importance |
Undecided |
Medium |
|
| 2020-04-02 08:00:44 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu): assignee |
|
Andy Whitcroft (apw) |
|
| 2020-04-02 08:00:47 |
Andy Whitcroft |
wireguard (Ubuntu Eoan): importance |
Undecided |
Medium |
|
| 2020-04-02 08:00:49 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu Eoan): importance |
Undecided |
Medium |
|
| 2020-04-02 08:00:50 |
Andy Whitcroft |
wireguard (Ubuntu Eoan): assignee |
|
Andy Whitcroft (apw) |
|
| 2020-04-02 08:00:53 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu Eoan): assignee |
|
Andy Whitcroft (apw) |
|
| 2020-04-02 08:00:57 |
Andy Whitcroft |
wireguard (Ubuntu): status |
In Progress |
Fix Released |
|
| 2020-04-02 08:01:03 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu): status |
In Progress |
Invalid |
|
| 2020-04-02 08:01:05 |
Andy Whitcroft |
wireguard (Ubuntu): status |
Fix Released |
Invalid |
|
| 2020-04-02 08:01:12 |
Andy Whitcroft |
wireguard (Ubuntu Eoan): status |
New |
In Progress |
|
| 2020-04-02 08:01:15 |
Andy Whitcroft |
wireguard-linux-compat (Ubuntu Eoan): status |
New |
In Progress |
|
| 2020-04-02 08:12:40 |
Andy Whitcroft |
description |
Resync our backports of wireguard and wireguard-linux-compat in eoan. wireguard userspace passes an uninitialised netlink field to the kernel which could lead to unpredictable behaviour. wireguard-linux-compat update fixes source nat handling amongst other fixes.
Note these will also want to go via the security PPA so they can be released to eoan-security. This is to ensure the previous update is available to -security only users. |
[Impact]
wireguard contains an uninitialised netlink member which could lead to unreliable operation. wireguard-linux-compat is maintained to match the upstream version which is under security review and cleanup keeping in sync with the maintainers backport provides the highest reliability and security for wireguard users.
Separately, the previous update was not built for -security but includes kernel compatibility which requires it be promoted to -security. This update has been built in the kernel security PPA and is valid for -security.
[Regression Potential]
Low. This is the version in continuous and active use in the development release, it is also the version applied upstream.
[Other Info]
The upstream maintainer of this feature is only committed to support of the upstream version of the compatibility code that is contained in Ubuntu.
===
Resync our backports of wireguard and wireguard-linux-compat in eoan. wireguard userspace passes an uninitialised netlink field to the kernel which could lead to unpredictable behaviour. wireguard-linux-compat update fixes source nat handling amongst other fixes.
Note these will also want to go via the security PPA so they can be released to eoan-security. This is to ensure the previous update is available to -security only users. |
|
| 2020-04-02 08:16:54 |
Andy Whitcroft |
bug task deleted |
wireguard-linux-compat (Ubuntu) |
|
|
| 2020-04-02 08:17:00 |
Andy Whitcroft |
bug task deleted |
wireguard (Ubuntu) |
|
|
| 2020-04-16 16:09:04 |
Łukasz Zemczak |
description |
[Impact]
wireguard contains an uninitialised netlink member which could lead to unreliable operation. wireguard-linux-compat is maintained to match the upstream version which is under security review and cleanup keeping in sync with the maintainers backport provides the highest reliability and security for wireguard users.
Separately, the previous update was not built for -security but includes kernel compatibility which requires it be promoted to -security. This update has been built in the kernel security PPA and is valid for -security.
[Regression Potential]
Low. This is the version in continuous and active use in the development release, it is also the version applied upstream.
[Other Info]
The upstream maintainer of this feature is only committed to support of the upstream version of the compatibility code that is contained in Ubuntu.
===
Resync our backports of wireguard and wireguard-linux-compat in eoan. wireguard userspace passes an uninitialised netlink field to the kernel which could lead to unpredictable behaviour. wireguard-linux-compat update fixes source nat handling amongst other fixes.
Note these will also want to go via the security PPA so they can be released to eoan-security. This is to ensure the previous update is available to -security only users. |
[Impact]
wireguard contains an uninitialised netlink member which could lead to unreliable operation. wireguard-linux-compat is maintained to match the upstream version which is under security review and cleanup keeping in sync with the maintainers backport provides the highest reliability and security for wireguard users.
Separately, the previous update was not built for -security but includes kernel compatibility which requires it be promoted to -security. This update has been built in the kernel security PPA and is valid for -security.
[Test Case]
Do a sanity test run using the -proposed packages and see if everything still works as expected.
[Regression Potential]
Low. This is the version in continuous and active use in the development release, it is also the version applied upstream.
[Other Info]
The upstream maintainer of this feature is only committed to support of the upstream version of the compatibility code that is contained in Ubuntu.
===
Resync our backports of wireguard and wireguard-linux-compat in eoan. wireguard userspace passes an uninitialised netlink field to the kernel which could lead to unpredictable behaviour. wireguard-linux-compat update fixes source nat handling amongst other fixes.
Note these will also want to go via the security PPA so they can be released to eoan-security. This is to ensure the previous update is available to -security only users. |
|
| 2020-04-16 16:13:00 |
Łukasz Zemczak |
wireguard-linux-compat (Ubuntu Eoan): status |
In Progress |
Fix Committed |
|
| 2020-04-16 16:13:01 |
Łukasz Zemczak |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2020-04-16 16:13:03 |
Łukasz Zemczak |
bug |
|
|
added subscriber SRU Verification |
| 2020-04-16 16:13:22 |
Łukasz Zemczak |
wireguard (Ubuntu Eoan): status |
In Progress |
Fix Committed |
|
| 2020-04-16 16:13:26 |
Łukasz Zemczak |
tags |
|
verification-needed verification-needed-eoan |
|
| 2020-05-13 08:34:17 |
Kleber Sacilotto de Souza |
tags |
verification-needed verification-needed-eoan |
verification-failed-eoan verification-needed |
|
| 2020-05-18 11:15:40 |
Łukasz Zemczak |
wireguard (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2020-05-18 11:15:44 |
Łukasz Zemczak |
tags |
verification-failed-eoan verification-needed |
verification-failed-eoan verification-needed verification-needed-focal |
|
| 2020-05-18 11:17:02 |
Łukasz Zemczak |
wireguard-linux-compat (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2020-05-18 11:38:02 |
Łukasz Zemczak |
tags |
verification-failed-eoan verification-needed verification-needed-focal |
verification-needed verification-needed-eoan verification-needed-focal |
|
| 2020-05-19 10:01:50 |
Andy Whitcroft |
tags |
verification-needed verification-needed-eoan verification-needed-focal |
verification-done-eoan verification-needed verification-needed-focal |
|
| 2020-05-19 13:45:52 |
Launchpad Janitor |
wireguard (Ubuntu Eoan): status |
Fix Committed |
Fix Released |
|
| 2020-05-19 13:45:54 |
Launchpad Janitor |
wireguard-linux-compat (Ubuntu Eoan): status |
Fix Committed |
Fix Released |
|
| 2020-05-19 13:45:56 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2020-06-15 09:06:26 |
Andy Whitcroft |
tags |
verification-done-eoan verification-needed verification-needed-focal |
verification-done-eoan verification-done-focal verification-needed |
|
| 2020-06-15 12:23:42 |
Launchpad Janitor |
wireguard (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2020-06-15 12:23:43 |
Launchpad Janitor |
wireguard-linux-compat (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
