Date: Fri, 20 May 2005 08:41:19 -0700 (PDT) From: stheg olloydson <stheg_olloydson@yahoo.com> To: freebsd-security@freebsd.org Subject: patch schedule for TCP timestamp issue Message-ID: <20050520154120.15171.qmail@web32712.mail.mud.yahoo.com>
next in thread | raw e-mail | index | archive | help
Hello, I see by the commit logs that the so-called PAWS vulnerability was fixed in -current on April 10. Could you, please, say when a patch will be released? Given the hole's low threat-level, this is not a pressing matter; so if the plan is to wait until the possible tcpdump and gzip issues are investigated and fixed (if necessary) so that a "3 for the price of 1" patch-set is released, that would be reasonable. Thanks, stheg Discover Yahoo! Stay in touch with email, IM, photo sharing and more. Check it out! http://discover.yahoo.com/stayintouch.html
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050520154120.15171.qmail>