[Bug 280705] 0.0.0.0/32 is equivalent to 127.0.0.1/32, which may be considered a security flaw

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280705 Mark Johnston changed: What|Removed |Added Status|New |Open CC|

[Bug 280705] 0.0.0.0/32 is equivalent to 127.0.0.1/32, which may be considered a security flaw

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280705 --- Comment #6 from paul vixie --- It has always been the case that if you bind to inaddr_any your socket will be available on all host interface addresses, and if you connect or sendto inaddr_any you'll reach some socket bound to some host

[Bug 280705] 0.0.0.0/32 is equivalent to 127.0.0.1/32, which may be considered a security flaw

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280705 --- Comment #5 from Eirik Oeverby --- (In reply to paul vixie from comment #4) I don't think that's a concern any longer, is it? The reason I'm even reporting this as a bug (and not simply leaving it to browser vendors to fix since that's h

[Bug 280701] FreeBSD-SA-24:05 fix breaks ICMP/ICMP6 states handling in pf firewall (ping, traceroute)

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280701 Mark Linimon changed: What|Removed |Added Assignee|b...@freebsd.org|n...@freebsd.org Keywords

[Bug 280705] 0.0.0.0/32 is equivalent to 127.0.0.1/32, which may be considered a security flaw

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280705 --- Comment #4 from paul vixie --- It certainly was intentional and I think documented. The first libresolv depended upon an uninitialized resaddr being the local host. -- You are receiving this mail because: You are the assignee for the

[Bug 280705] 0.0.0.0/32 is equivalent to 127.0.0.1/32, which may be considered a security flaw

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280705 paul vixie changed: What|Removed |Added CC||p...@redbarn.org --- Comment #3 from

[Bug 280705] 0.0.0.0/32 is equivalent to 127.0.0.1/32, which may be considered a security flaw

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280705 Mark Linimon changed: What|Removed |Added Assignee|b...@freebsd.org|n...@freebsd.org -- You are receiv

[Bug 280599] net/aquantia-atlantic-kmod: No ethernet on common workstation targets using aquantia-atlantic-kmod

2024-08-09 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280599 Mark Johnston changed: What|Removed |Added Status|New |Open CC|