Hi, Thus wrote Manuel Bouyer (bou...@antioche.eu.org):
> On Fri, Apr 01, 2011 at 08:29:30AM +0000, S.P.Zeidler wrote: > > Module Name: src > > Committed By: spz > > Date: Fri Apr 1 08:29:30 UTC 2011 > > > > Modified Files: > > src/sys/netipsec: xform_ipcomp.c > > > > Log Message: > > mitigation for CVE-2011-1024 > > Hi, > are you sure about this CVE number ? It's wrong, should have been CVE-2011-1547 Please see tech-net for further discussion. Improvements, tests, etc greatly appreciated. "Someone with a clue about the network stack should look this over". regards, spz -- s...@serpens.de (S.P.Zeidler)