Description
Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-845-1 mason - programming error Debian Security (DSA / DLA) · Mar 9, 2026
References
- 19875 vdb-entry
- ADV-2005-1976 vdb-entry
- 17084 third-party-advisory
- DSA-845 vendor-advisory
- 15019 vdb-entry