Download NuFW 1.0.21

The NuFW program is an extensive firewall that can filter every connection on the user’s rights and operating system. It uses an ldap server to check the permissions and Netfilter to apply the filtering technique. For more information about NuFW, we refer you to this page. Version 1.0.21 is now available in the stable branch with the following announcement:

This release fixes an issue related to a misuse of GnuTLS. An authenticated user using a specially modified client could by generating a lot of network traffic hang after a long delay one thread of the authentication server. This could cause nuauth to dysfunction till the system destroys the concerned socket. In extreme cases this could lead to a denial of service on the authentication server.

Version 1.0.21 also features some code cleaning.

The NuFW core team recommends users upgrade their nuauth installations.

The full changelog is as follows:

• libnuclient: free connection table when cleaning session
• nuauth: free nu_session if TLS negotiation fails
• nuauth: TLS sockets are now non-blocking to avoid potential Denial of service from authenticated users