From owner-freebsd-stable Sat Apr 7 10: 6: 8 2001 Delivered-To: freebsd-stable@freebsd.org Received: from ns1.unixathome.org (ns1.unixathome.org [203.79.82.27]) by hub.freebsd.org (Postfix) with ESMTP id 1B68437B424; Sat, 7 Apr 2001 10:06:01 -0700 (PDT) (envelope-from dan@langille.org) Received: from wocker (root@ns1.unixathome.org [192.168.0.20]) by ns1.unixathome.org (8.11.3/8.11.3) with ESMTP id f37H4ue49890; Sun, 8 Apr 2001 05:04:57 +1200 (NZST) (envelope-from dan@langille.org) Message-Id: <200104071704.f37H4ue49890@ns1.unixathome.org> From: "Dan Langille" Organization: novice in training To: Cy Schubert - ITSD Open Systems Group , jkh@freebsd.org Date: Sat, 7 Apr 2001 13:04:55 -0400 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Fwd: URGENT: Serious bug in IPFilter Reply-To: dan@langille.org Cc: "Phillip" , "stable@freebsd.org" In-reply-to: <200104071659.f37GxpB03622@cwsys.cwsent.com> References: Your message of "Fri, 06 Apr 2001 17:43:15 EDT." <200104062143.f36LhNe42316@ns1.unixathome.org> X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 7 Apr 2001, at 9:59, Cy Schubert - ITSD Open Systems Group wrote: > In message <200104062143.f36LhNe42316@ns1.unixathome.org>, "Dan > Langille" write > s: > > On 7 Apr 2001, at 7:23, Phillip wrote: > > > > > In the last few hours, the author of IPF issued this notice with some patch > > es > > > for a bug. I didn't include the patch because it looks as though its been > > > revised. But depending on the state of play with the timetable for > > > 4.3-RELEASE, it may be possible to include the updated version in > > > a later version of -RELEASE or -STABLE. > > > > Darren Reed has committed the changes to -current (see > > 200104061552.f36FqTf87523@freefall.freebsd.org). I've already asked > > Darren via cvs-committers@FreeBSD.org and cvs-all@FreeBSD.org if it > > can be MFC'd before 4.3-RELEASE. > > > > Darren's original post and the fragment patches area available at > > http://false.net/ipfilter/2001_04/0087.html. > > > > I too would like to them MFC'd. Failing that, I'm trying to confirm the > > patch instructions via the ipfilter mailing list. > > If they're not MFC'd by the time 4.3 is released, IMO 4.3 would be > shipped with a serious security flaw. > > Jordan, would you please consider approving the MFC of the IP Filter > security patches? It's already been committed. http://docs.freebsd.org/cgi/getmsg.cgi?fetch=1125147+0+current/cvs-all -- Dan Langille pgpkey - finger dan@unixathome.org | http://unixathome.org/finger.php got any work? I'm looking for some. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message