Return to errata28.html CVS log | Up to [local] / www |
version 1.8, 2001/06/07 02:06:39 | version 1.9, 2001/06/10 18:11:31 | ||
---|---|---|---|
|
|
||
<p> | <p> | ||
<a name=ipf_frag></a> | <a name=ipf_frag></a> | ||
<li><font color=#009000><strong>027: SECURITY FIX: Apr 23, 2001</strong></font><br> | <li><font color=#009000><strong>027: SECURITY FIX: Apr 23, 2001</strong></font><br> | ||
IPF has a serious problem with fragment cacheing, the bug is triggered if you use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipf&sektion=5">ipf(5)</a> syntax "keep state".<br> | IPF has a serious problem with fragment cacheing, the bug is triggered if you use the ipf(5) syntax "keep state".<br> | ||
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/027_ipf-frag.patch">A source code patch exists which remedies the problem.</a><br> | <a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/027_ipf-frag.patch">A source code patch exists which remedies the problem.</a><br> | ||
<p> | <p> | ||
<a name=glob_limit></a> | <a name=glob_limit></a> |