[Bug 294863] pfctl: rules with distinct __automatic* tables are incorrectly deduplicated

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294863

--- Comment #1 from Andrew Philips <[email protected]> ---
After reading today's CVE release, it was brought to my attention that this bug
has been fixed in p7. I attempted to mark it as a duplicate, but don't have a
bug #.

CVE: https://www.freebsd.org/security/advisories/FreeBSD-EN-26:08.pf.asc

I should be noted that the Workaround cited in the CVE does not in fact work,
as far as I can tell.

> V.  Workaround

> This problem only affects rules with tables created by the pfctl rules
> optimiser.  Either disable ruleset optimisation ('set ruleset-optimization
> none'), or avoid constructs which would be optimisised into a table (e.g. by
> manually creating such tables).

This was filed as bug 294858.

-- 
You are receiving this mail because:
You are the assignee for the bug.