From owner-freebsd-security Tue Mar 19 2:42:59 2002 Delivered-To: freebsd-security@freebsd.org Received: from gamma.star.spb.ru (gamma.star.spb.ru [217.195.79.1]) by hub.freebsd.org (Postfix) with ESMTP id DA57137B404 for ; Tue, 19 Mar 2002 02:42:52 -0800 (PST) Received: from green.star.spb.ru (green.star.spb.ru [217.195.79.10]) by gamma.star.spb.ru (8.9.3/8.9.3) with ESMTP id NAA42514 for ; Tue, 19 Mar 2002 13:42:46 +0300 (MSK) Received: from IBMKA.star.spb.ru (217.195.79.241 [217.195.79.241]) by green.star.spb.ru with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id GY0AJA2A; Tue, 19 Mar 2002 13:42:40 +0300 Date: Tue, 19 Mar 2002 13:42:31 +0300 From: "Nickolay A. Kritsky" X-Mailer: The Bat! (v1.49) Personal Reply-To: "Nickolay A.Kritsky" X-Priority: 3 (Normal) Message-ID: <785082402.20020319134231@internethelp.ru> To: security@FreeBSD.ORG Subject: TCP connections on broadcast address - why no advisory? Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello, freebsd-security. On the Bugtraq I have read report by Christ J. Clark about TCP connections on broadcast address. It can be found on http://online.securityfocus.com/archive/1/262733 . In this advisories I've read following: I committed changes to FreeBSD 5-CURRENT on Feburary 25th (CVS revision 1.148) and to 4-STABLE on February 28th (revision 1.107.2.21). After discussion with the FreeBSD security-officer@ team, these changes will not be incorporated into the RELENG_4_{3,4,5} security-fix branches nor will an advisory be released. Why no advisory will be released? What if I wasn't subscribed to BUGTRAQ? How would I know about this bug? Maybe I missed something. Sorry then. ;------------------------------------------- ; NKritsky ; mailto:nkritsky@internethelp.ru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message