Bug 51035

Summary: univention-firewall: make UCR templates python3-compatible
Product: UCS Reporter: Sönke Schwardt-Krummrich <schwardt>
Component: Firewall (univention-firewall)Assignee: Sönke Schwardt-Krummrich <schwardt>
Status: CLOSED FIXED QA Contact: Arvid Requate <requate>
Severity: normal    
Priority: P5 CC: requate
Version: UCS 4.4   
Target Milestone: UCS 4.4-4-errata   
Hardware: Other   
OS: Linux   
See Also: https://forge.univention.org/bugzilla/show_bug.cgi?id=45500
What kind of report is it?: Development Internal What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:

Description Sönke Schwardt-Krummrich univentionstaff 2020-03-27 21:58:32 CET
The UCR templates of univention-firewall have to be python3-compatible.
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2020-03-29 22:21:27 CEST
- The UCR templates have been made python3-compatible.
- In 10_univention-firewall_start.sh the rulesets are now sorted to get reproducible results. In the past, the rule order was depending on the process' hashing key for dictionaries.
- 20_docker.sh is now using the python module "ipaddress" instead of "ipaddr". ipaddress is more strict and requires e.g. unicode input. Also IPv4Interface is now used instead of IPv4Address/IPv4Network because a mixture of IP address with subnet mask is no longer allowed.

[4.4-4] 5d6ac9f2b0 Bug #51035: update advisory of univention-firewall
[4.4-4] 929e6f90f5 Bug #51035: Merge branch 'sschwardt/4.4-4/py3-ucr-templates' into 4.4-4
[4.4-4] 4286d3da29 Bug #51035: univention-firewall: add advisory
[4.4-4] 80a6378725 Bug #51035: univention-firewall: add changelog entry
[4.4-4] bf2986955a Bug #51035: univention-firewall: use ipaddress instead of ipaddr
[4.4-4] 542951d540 Bug #51035: univention-firewall: sort rules for reproducible results
[4.4-4] cecd01f8a2 Bug #51035: univention-firewall: use py3-compatible print statements


Package: univention-firewall
Version: 11.0.1-7A~4.4.0.202003292207
Branch: ucs_4.4-0
Scope: errata4.4-4
Comment 2 Arvid Requate univentionstaff 2020-04-02 11:09:42 CEST
Verified:
* Code review
* Package update
* Diff of commited templates before/after update
* Advisory
Comment 3 Erik Damrose univentionstaff 2020-04-02 14:47:51 CEST
<http://errata.software-univention.de/ucs/4.4/505.html>