[nsp-sec] vendor-flaw: for all the freebsd users out there

[Paul Goyette]

I sent a directed response to Chris yesterday...  

> Juniper has substantially modified this code, so the FreeBSD patch
> is not relevant.
> 
> Our engineering folks are checking to see if we have some similar
> issue.

Here's an update...

Our engineering folks have examined the JUNOS code, and our initial
assessment is that we have something that needs to be fixed.  :(

We're working on developing the fix and on determining the delivery
mechanism(s) that will be used.

While we may update folks on this forum, affected customers should
use normal support processes (ie, "open a case") to get plugged in
to the formal communication channels.

> 
> > -----Original Message-----
> > From: nsp-security-bounces at puck.nether.net 
> > [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of 
> > Chris Morrow
> > Sent: Wednesday, September 03, 2008 5:55 PM
> > To: nsp-security at puck.nether.net
> > Subject: [nsp-sec] vendor-flaw: for all the freebsd users out there
> > 
> > ----------- nsp-security Confidential --------
> > 
> > 
> > well, to be fair a free-software-thing can't really be a 
> > vendor-flaw, but 
> > :)
> > 
> > <http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc>
> > 
> > given that, are Juniper and other folks with freebsd-bases 
> concerned? 
> > (citrix for instance also has fbsd as underpinnings)
> > 
> > -chris
> > 
> > (obl v6 bitch: "Go fully baked protocol!!")
> > 
> > 
> > _______________________________________________
> > nsp-security mailing list
> > nsp-security at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/nsp-security
> > 
> > Please do not Forward, CC, or BCC this E-mail outside of the 
> > nsp-security
> > community. Confidentiality is essential for effective 
> > Internet security counter-measures.
> > _______________________________________________
> >