On Wednesday, 29 July 2015 05:59:14 PM Patrick Kelsey wrote: > Author: pkelsey > Date: Wed Jul 29 17:59:13 2015 > New Revision: 286027 > URL: https://svnweb.freebsd.org/changeset/base/286027 > > Log: > Revert r265338, r271089 and r271123 as those changes do not handle > non-inline urgent data and introduce an mbuf exhaustion attack vector > similar to FreeBSD-SA-15:15.tcp, but not requiring VNETs. > > Address the issue described in FreeBSD-SA-15:15.tcp. > > Reviewed by: glebius > Approved by: so > Approved by: jmallett (mentor) > Security: FreeBSD-SA-15:15.tcp > Sponsored by: Norse Corp, Inc.
Does this commit need to be MFC'd to stable/10? Or is this only for HEAD? Thanks, -- Shawn Webb HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE
signature.asc
Description: This is a digitally signed message part.