From owner-freebsd-security@FreeBSD.ORG Tue Mar 2 11:59:41 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E12FA16A4CE for ; Tue, 2 Mar 2004 11:59:41 -0800 (PST) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id B094E43D39 for ; Tue, 2 Mar 2004 11:59:41 -0800 (PST) (envelope-from nectar@celabo.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id 3A69A5486E; Tue, 2 Mar 2004 13:59:41 -0600 (CST) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 90006-07; Tue, 2 Mar 2004 13:59:30 -0600 (CST) Received: from lum.celabo.org (n00.bcrtfl01.us.wh.nameservers.net [208.55.254.110]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "lum.celabo.org", Issuer "celabo.org CA" (verified OK)) by gw.celabo.org (Postfix) with ESMTP id 7BB4B5485D; Tue, 2 Mar 2004 13:59:30 -0600 (CST) Received: by lum.celabo.org (Postfix, from userid 501) id 3A3A910CE31; Tue, 2 Mar 2004 13:59:20 -0600 (CST) Date: Tue, 2 Mar 2004 13:59:20 -0600 From: "Jacques A. Vidrine" To: D J Hawkey Jr Message-ID: <20040302195919.GF1543@lum.celabo.org> Mail-Followup-To: "Jacques A. Vidrine" , D J Hawkey Jr , freebsd-security@FreeBSD.org References: <6.0.3.0.0.20040229182702.07a67a68@209.112.4.2> <20040301190338.GB749@lum.celabo.org> <20040302195555.GA7663@sheol.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040302195555.GA7663@sheol.localdomain> User-Agent: Mutt/1.4.1i X-Url: http://www.celabo.org/ cc: freebsd-security@FreeBSD.org Subject: Re: mbuf vulnerability X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Mar 2004 19:59:42 -0000 On Tue, Mar 02, 2004 at 01:55:55PM -0600, D J Hawkey Jr wrote: > On Mar 01, at 01:03 PM, Jacques A. Vidrine wrote: > > > > On Sun, Feb 29, 2004 at 07:38:11PM -0500, Mike Tancsa wrote: > > > In > > > http://docs.freebsd.org/cgi/mid.cgi?200402260743.IAA18903 > > > > > > it seems RELENG_4 is vulnerable. Is there any work around to a system that > > > has to have ports open ? > > > > There will be advisories and patches available tomorrow. > > Not to pester, but it's the day-after-tomorrow today %-/ > Can we expect this Real Soon Now(tm)? I wrote that March 1st, today is March 2nd. The advisory and patches have been on the FTP server for almost 2 hours. I only just minutes ago pushed the button to email it everywhere. (Good thing too, 'cause I mistyped a URL in there originally.) Cheers, -- Jacques Vidrine / nectar@celabo.org / jvidrine@verio.net / nectar@freebsd.org