From owner-freebsd-stable Sat Apr 7 10: 1: 3 2001 Delivered-To: freebsd-stable@freebsd.org Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (Postfix) with ESMTP id 6D8D537B423; Sat, 7 Apr 2001 10:01:00 -0700 (PDT) (envelope-from Cy.Schubert@uumail.gov.bc.ca) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.8.7/8.8.8) id KAA22626; Sat, 7 Apr 2001 10:00:51 -0700 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda22624; Sat Apr 7 10:00:34 2001 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.11.2/8.9.1) id f37H0T377042; Sat, 7 Apr 2001 10:00:29 -0700 (PDT) Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com" via SMTP by passer9.cwsent.com, id smtpdO77026; Sat Apr 7 09:59:52 2001 Received: (from uucp@localhost) by cwsys.cwsent.com (8.11.3/8.9.1) id f37GxpB03622; Sat, 7 Apr 2001 09:59:51 -0700 (PDT) Message-Id: <200104071659.f37GxpB03622@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpdZF3614; Sat Apr 7 09:59:34 2001 X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 Reply-To: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-Sender: schubert To: dan@langille.org, jkh@freebsd.org Cc: "Phillip" , "stable@freebsd.org" Subject: Re: Fwd: URGENT: Serious bug in IPFilter In-reply-to: Your message of "Fri, 06 Apr 2001 17:43:15 EDT." <200104062143.f36LhNe42316@ns1.unixathome.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sat, 07 Apr 2001 09:59:34 -0700 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message <200104062143.f36LhNe42316@ns1.unixathome.org>, "Dan Langille" write s: > On 7 Apr 2001, at 7:23, Phillip wrote: > > > In the last few hours, the author of IPF issued this notice with some patch > es > > for a bug. I didn't include the patch because it looks as though its been > > revised. But depending on the state of play with the timetable for > > 4.3-RELEASE, it may be possible to include the updated version in > > a later version of -RELEASE or -STABLE. > > Darren Reed has committed the changes to -current (see > 200104061552.f36FqTf87523@freefall.freebsd.org). I've already asked > Darren via cvs-committers@FreeBSD.org and cvs-all@FreeBSD.org if it > can be MFC'd before 4.3-RELEASE. > > Darren's original post and the fragment patches area available at > http://false.net/ipfilter/2001_04/0087.html. > > I too would like to them MFC'd. Failing that, I'm trying to confirm the > patch instructions via the ipfilter mailing list. If they're not MFC'd by the time 4.3 is released, IMO 4.3 would be shipped with a serious security flaw. Jordan, would you please consider approving the MFC of the IP Filter security patches? Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/Alpha Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message