RHBA-2014:1543 - Bug Fix Advisory

Topic

Updated ipset packages that fix one bug are now available for Red Hat Enterprise
Linux 6.

Description

The ipset packages provide IP sets, a framework inside the Linux 2.4.x and 2.6.x
kernel, which can be administered by the ipset utility. Depending on the type,
an IP set can currently store IP addresses, TCP/UDP port numbers or IP addresses
with MAC addresses in a way that ensures high speed when matching an entry
against a set.

This update fixes the following bug:

• Prior to this update, ipset initiation script which would load the ipset rules

was missing. Consequently, security problems at system initiation could occur.
This update provides all the files necessary to add an ipset systemd service,
which starts up before iptables and stops afterwards. As a result, ipset rules
can be started, stopped, and saved as intended. (BZ#888571)

Users of ipset are advised to upgrade to these updated packages, which fix this
bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 888571 - provide an init script that loads the ipsets

CVEs

(none)

References

(none)