linux-image-2.6.32-302-ec2 is missing iptables module xt_recent

Bug #532553 reported by Henk Jan Agteresch
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-ec2 (Ubuntu)
Fix Released
Low
John Johansen

Bug Description

linux-image-2.6.32-302-ec2 is missing iptables module xt_recent

grep RECENT /boot/config-2.6.32-302-ec2
# CONFIG_NETFILTER_XT_MATCH_RECENT is not set

CVE References

Revision history for this message
Scott Moser (smoser) wrote :

For reference, ubuntu-server kernel:

$ uname -r
2.6.32-17-server
$ grep MATCH_RECENT /boot/config-$(uname -r)
CONFIG_NETFILTER_XT_MATCH_RECENT=m
# CONFIG_NETFILTER_XT_MATCH_RECENT_PROC_COMPAT is not set

So, in "normal" ubuntu-server kernel, this is set.

Changed in linux-ec2 (Ubuntu):
importance: Undecided → Low
status: New → Confirmed
Andy Whitcroft (apw)
Changed in linux-ec2 (Ubuntu):
status: Confirmed → Fix Committed
assignee: nobody → John Johansen (jjohansen)
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (13.1 KiB)

This bug was fixed in the package linux-ec2 - 2.6.32-305.9

---------------
linux-ec2 (2.6.32-305.9) lucid; urgency=low

  [ Andy Whitcroft ]

  * rebase to Ubuntu-2.6.32-21.31
  * SAUCE: xen -- TSC is not available under XEN

  [ John Johansen ]

  * [Config] enable NETFILTER_XT_MATCH_RECENT for ec2 kernels
    - LP: #532553

  [ Ubuntu: 2.6.32-21.31 ]

  * allow modules.builtin to be optional
  * d-i: add mpt2sas to the message-modules udeb
    - LP: #530361
  * SAUCE: Nouveau: Add quirk framework to disable acceleration
    - LP: #544088, #546393
  * SAUCE: Nouveau: Disable acceleration on MacBook Pros
    - LP: #546393
  * SAUCE: Nouveau: Disable acceleration on GeForce3 cards
    - LP: #544088
  * SAUCE: Nouveau: Disable acceleration on 6100 cards
    - LP: #542950
  * SAUCE: dma-mapping: Remove WARN_ON in dma_free_coherent
    - LP: #458201
  * SAUCE: sync before umount to reduce time taken by ext4 umount
    - LP: #543617
  * tipc: Fix oops on send prior to entering networked mode (v3)
    - CVE-2010-1187
  * KVM: x86 emulator: Add Virtual-8086 mode of emulation
    - LP: #561425
  * KVM: x86 emulator: fix memory access during x86 emulation
    - LP: #561425
  * KVM: x86 emulator: Check IOPL level during io instruction emulation
    - LP: #561425
  * KVM: x86 emulator: Fix popf emulation
    - LP: #561425
  * KVM: Fix segment descriptor loading
    - LP: #561425
  * KVM: VMX: Update instruction length on intercepted BP
    - LP: #561425
  * KVM: VMX: Use macros instead of hex value on cr0 initialization
    - LP: #561425
  * KVM: SVM: Reset cr0 properly on vcpu reset
    - LP: #561425
  * KVM: VMX: Disable unrestricted guest when EPT disabled
    - LP: #561425
  * KVM: x86: disable paravirt mmu reporting
    - LP: #561425
  * AppArmor: Fix put of unassigned ns if aa_unpack fails
  * AppArmor: Fix refcount bug when exec fails
    - LP: #562063
  * AppArmor: Take refcount on cxt->profile to ensure it remains a valid
    reference
    - LP: #367499
  * AppArmor: fix typo in scrubbing environment variable warning
    - LP: #562060
  * AppArmor: fix regression by setting default to mediate deleted files
    - LP: #562056
  * AppArmor: fix refcount order bug that can trigger during replacement
    - LP: #367499
  * AppArmor: Make sure to unmap aliases for vmalloced dfas before they are
    live
    - LP: #529288
  * AppArmor: address performance regression of replaced profile
    - LP: #549428
  * AppArmor: make the global side the correct type
    - LP: #562047
  * AppArmor: use the kernel shared workqueue to free vmalloc'ed dfas
  * sky2: add register definitions for new chips
    - LP: #537168
  * sky2: 88E8059 support
    - LP: #537168
  * net: Fix Yukon-2 Optima TCP offload setup
    - LP: #537168
  * net: Add missing TST_CFG_WRITE bits around sky2_pci_write
    - LP: #537168
  * sky2: print Optima chip name
    - LP: #537168
  * (Upstream) dell-laptop: defer dell_rfkill_update to worker thread
    - LP: #555261
  * drm/nv40: add LVDS table quirk for Dell Latitude D620
    - LP: #539730

  [ Ubuntu: 2.6.32-20.30 ]

  * Revert "(pre-stable) ACPI: EC: Allow multibyte access to EC"
    - LP: #561151

  [ Ubuntu: 2.6.32-20.29 ]

  * Revert ...

Changed in linux-ec2 (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.