From owner-freebsd-security@freebsd.org  Tue Jun 18 14:36:56 2019
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7C5C815BEDEF
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Tue, 18 Jun 2019 14:36:56 +0000 (UTC) (envelope-from stb@lassitu.de)
Received: from gilb.zs64.net (gilb.zs64.net [IPv6:2a00:14b0:4200:32e0::1ea])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 server-signature RSA-PSS (4096 bits)
 client-signature RSA-PSS (2048 bits) client-digest SHA256)
 (Client CN "gilb.zs64.net", Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 2215C8031A
 for <freebsd-security@freebsd.org>; Tue, 18 Jun 2019 14:36:54 +0000 (UTC)
 (envelope-from stb@lassitu.de)
Received: by gilb.zs64.net (Postfix, from stb@lassitu.de) id 5153A1BE636
 for <freebsd-security@freebsd.org>; Tue, 18 Jun 2019 14:36:52 +0000 (UTC)
From: Stefan Bethke <stb@lassitu.de>
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Subject: CVE-2019-5599: SACK Slowness (FreeBSD 12 using the RACK TCP Stack)
Message-Id: <7AC3FC6A-99CD-4C59-9822-18E4B498285D@lassitu.de>
Date: Tue, 18 Jun 2019 16:36:50 +0200
To: freebsd-security@freebsd.org
X-Mailer: Apple Mail (2.3445.104.11)
X-Rspamd-Queue-Id: 2215C8031A
X-Spamd-Bar: +
Authentication-Results: mx1.freebsd.org;
 spf=pass (mx1.freebsd.org: domain of stb@lassitu.de designates
 2a00:14b0:4200:32e0::1ea as permitted sender) smtp.mailfrom=stb@lassitu.de
X-Spamd-Result: default: False [1.53 / 15.00]; ARC_NA(0.00)[];
 FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MV_CASE(0.50)[];
 MIME_GOOD(-0.10)[text/plain];
 PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org];
 TO_DN_NONE(0.00)[]; NEURAL_SPAM_MEDIUM(0.08)[0.084,0];
 RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MX_GOOD(-0.01)[gilb.zs64.net];
 NEURAL_SPAM_LONG(0.09)[0.089,0]; DMARC_NA(0.00)[lassitu.de];
 NEURAL_SPAM_SHORT(0.85)[0.851,0];
 IP_SCORE(0.31)[ipnet: 2000::/3(0.37), asn: 12874(1.15), country: IT(0.05)];
 FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[];
 MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:12874, ipnet:2000::/3, country:IT];
 MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2]
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jun 2019 14:36:56 -0000

h=
ttps://github.com/Netflix/security-bulletins/blob/master/advisories/third-=
party/2019-001.md

Are stock kernels/configurations affected? If so, will a fix or =
workaround be incorporated?


Thanks,
Stefan

--=20
Stefan Bethke <stb@lassitu.de>   Fon +49 151 14070811