Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 7 Apr 2001 13:04:55 -0400
From:      "Dan Langille" <dan@langille.org>
To:        Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>, jkh@freebsd.org
Cc:        "Phillip" <phillip@accessunited.com.au>, "stable@freebsd.org" <stable@freebsd.org>
Subject:   Re: Fwd: URGENT: Serious bug in IPFilter 
Message-ID:  <200104071704.f37H4ue49890@ns1.unixathome.org>
In-Reply-To: <200104071659.f37GxpB03622@cwsys.cwsent.com>
References:  Your message of "Fri, 06 Apr 2001 17:43:15 EDT."             <200104062143.f36LhNe42316@ns1.unixathome.org> 

next in thread | previous in thread | raw e-mail | index | archive | help

On 7 Apr 2001, at 9:59, Cy Schubert - ITSD Open Systems Group 
wrote:

> In message <200104062143.f36LhNe42316@ns1.unixathome.org>, "Dan 
> Langille" write
> s:
> > On 7 Apr 2001, at 7:23, Phillip wrote: 
> > 
> > > In the last few hours, the author of IPF issued this notice with some patch
> > es
> > > for a bug. I didn't include the patch because it looks as though its been
> > > revised. But depending on the state of play with the timetable for
> > > 4.3-RELEASE, it may be possible to include the updated version in
> > > a later version of -RELEASE or -STABLE.
> > 
> > Darren Reed has committed the changes to -current (see 
> > 200104061552.f36FqTf87523@freefall.freebsd.org).  I've already asked 
> > Darren via cvs-committers@FreeBSD.org and cvs-all@FreeBSD.org if it 
> > can be MFC'd before 4.3-RELEASE. 
> > 
> > Darren's original post and the fragment patches area available at 
> > http://false.net/ipfilter/2001_04/0087.html. 
> > 
> > I too would like to them  MFC'd.  Failing that, I'm trying to confirm the 
> > patch instructions via the ipfilter mailing list. 
> 
> If they're not MFC'd by the time 4.3 is released, IMO 4.3 would be 
> shipped with a serious security flaw.
> 
> Jordan, would you please consider approving the MFC of the IP Filter 
> security patches?

It's already been committed. 

http://docs.freebsd.org/cgi/getmsg.cgi?fetch=1125147+0+current/cvs-all

-- 
Dan Langille
pgpkey - finger dan@unixathome.org | http://unixathome.org/finger.php
got any work?  I'm looking for some.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104071704.f37H4ue49890>