WITHDRAW: [PATCH 0/1] [CVE-2012-2663] [HARDY] [LUCID] [NATTY] [ONEIRIC] [PRECISE] tcp: drop SYN+FIN messages

[Brad Figg]

On 05/31/2012 03:58 PM, Brad Figg wrote:
> With current stable Linux kernel release (as well as with most of the previous
> versions) blocking TCP packets with the SYN bit set and the ACK,RST and FIN
> bits cleared won't prevent incoming TCP connections.
> 
> 
> Eric Dumazet (1):
>   tcp: drop SYN+FIN messages
> 
>  net/ipv4/tcp_input.c |    2 ++
>  1 file changed, 2 insertions(+)
> 

John Johansen has explained that the fix for this issue is going through
some rework. Please do not apply this patch.

-- 
Brad Figg brad.figg at canonical.com http://www.canonical.com