From owner-freebsd-security@FreeBSD.ORG Thu Mar 23 10:06:24 2006 Return-Path: X-Original-To: FreeBSD-security@freebsd.org Delivered-To: FreeBSD-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1ED7B16A400 for ; Thu, 23 Mar 2006 10:06:24 +0000 (UTC) (envelope-from cperciva@freebsd.org) Received: from pd5mo3so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id B961543D46 for ; Thu, 23 Mar 2006 10:06:23 +0000 (GMT) (envelope-from cperciva@freebsd.org) Received: from pd2mr6so.prod.shaw.ca (pd2mr6so-qfe3.prod.shaw.ca [10.0.141.9]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0IWK00CSCS2N0A80@l-daemon> for FreeBSD-security@freebsd.org; Thu, 23 Mar 2006 03:06:23 -0700 (MST) Received: from pn2ml9so.prod.shaw.ca ([10.0.121.7]) by pd2mr6so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0IWK004R3S2NI710@pd2mr6so.prod.shaw.ca> for FreeBSD-security@freebsd.org; Thu, 23 Mar 2006 03:06:23 -0700 (MST) Received: from [192.168.0.60] ([24.82.18.31]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0IWK003Q3S2MPLV0@l-daemon> for FreeBSD-security@freebsd.org; Thu, 23 Mar 2006 03:06:23 -0700 (MST) Date: Thu, 23 Mar 2006 02:06:21 -0800 From: Colin Percival In-reply-to: <20060323110015.R99976@atlantis.atlantis.dp.ua> To: Dmitry Pryanishnikov Message-id: <4422731D.4050804@freebsd.org> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7bit X-Enigmail-Version: 0.94.0.0 References: <200603221611.k2MGBNaj010025@freefall.freebsd.org> <20060323110015.R99976@atlantis.atlantis.dp.ua> User-Agent: Thunderbird 1.5 (X11/20060112) Cc: FreeBSD-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-06:11.ipsec X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Mar 2006 10:06:24 -0000 Dmitry Pryanishnikov wrote: > As far as I understood, only systems which use "options FAST_IPSEC" are > affected by this issue. Is it true? If so, wouldn't be wise to stress this > fact in the advisory? Yes, and yes. Usually we do mention things like this; it slipped through the cracks this time. Colin Percival