patch schedule for TCP timestamp issue

stheg olloydson stheg_olloydson at yahoo.com
Fri May 20 15:41:24 GMT 2005


Hello,

I see by the commit logs that the so-called PAWS vulnerability
was fixed in -current on April 10. Could you, please, say when a
patch will be released?
Given the hole's low threat-level, this is not a pressing
matter; so if the plan is to wait until the possible tcpdump and
gzip issues are investigated and fixed (if necessary) so that a
"3 for the price of 1" patch-set is released, that would be
reasonable.

Thanks,

stheg


		
Discover Yahoo! 
Stay in touch with email, IM, photo sharing and more. Check it out! 
http://discover.yahoo.com/stayintouch.html


More information about the freebsd-security mailing list