Package: iptables
Version: 1.4.2-5
Severity: normal
The upstream fix may not enter Lenny since it implies a new upstream version of
the package. However, I found that the actual fix is nearly trivial. Since
this bug affects the preferred platform for OS-level virtualization for Debian
(OpenVZ), it may be interesting to apply this simple patch and include it in a
new version in the next Lenny point release (r1). I think the Debian Policy
allows this.
The patch is:
----8<----
--- a/xtables.c
+++ b/xtables.c
@@ -272,6 +272,12 @@ int xtables_insmod(const char *modname, const char
*modprobe, bool quiet)
modprobe = buf;
}
+ /*
+ * Need to flush the buffer, or the child may output it again
+ * when switching the program thru execv.
+ */
+ fflush(stdout);
+
switch (fork()) {
case 0:
argv[0] = (char *)modprobe;
----8<----
Taken from:
https://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commitdiff;h=c19f880d8aac7c0372381e29d7cea09accd0db26
Thanks a lot.
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
