This came across security focus and I haven't seen it mentioned here. THey claim 3.8 is vulnerable, anybody know anything?
l0r3zz 06.4.12 CVE: CVE-2006-0381 Platform: BSD Title: OpenBSD PF IP Fragment Remote Denial Of Service Description: PF is a packet filtering package that is integrated into the operating system's kernel. OpenBSD's PF is susceptible to a remote denial of service vulnerability. This issue is due to a flaw in affected kernels that results in a kernel crash when attempting to normalize IP fragments. For a list of vulnerable versions, see the reference below. Ref: http://www.securityfocus.com/bid/16375
