Date: Sat, 3 Feb 2001 21:49:00 -0800 (PST) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet ip_fw.c Message-ID: <200102040549.f145n0v65837@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2001/02/03 21:49:00 PST
Modified files: (Branch: RELENG_4)
sys/netinet ip_fw.c
Log:
A recent commit (1.131.2.13) removed the security fix associated with
FreeBSD-SA-01:08, breaking the "established" TCP matching flag even
more than it was prior to the security advisory. Reinstate the fix by
restoring the conditional assocated with entering tcpflg_match().
Reported by a number of people via send-pr, security-officer,
et al., including:
Steven Farmer <steve@megahack.com>
Bernd Luevelsmeyer <bdluevel@heitec.net>
Andrew Gordon <arg@arg1.demon.co.uk>
Thanks to those people for bringing this to our attention in such a
timely manner. An updated advisory and/or announcement to the
freebsd-stable mailing list will be forthcoming, once all parties have
confirmed that this resolves the problems they were experiencing.
PR: 24833
Approved by: security-officer
Slap on the wrist to: luigi
Revision Changes Path
1.131.2.14 +4 -2 src/sys/netinet/ip_fw.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200102040549.f145n0v65837>