Bugzilla Bug 26507

The guys over at SuSE have released an updated kernel of theirs today
addressing issues in the networking code:

From the suse-security-announce at suse.com list:
------- snip --------
1)  problem description, brief discussion, solution, upgrade information

    During the last weeks a couple of security relevant fixes have been
    accumulated for the kernel. These fix local vulnerabilities and
    remote DoS conditions. The list of the fixed vulnerabilities is
    as follows:

      - fix for a possible denial of service attack (DoS) in the routing code
      - fix for a possible attack of an unpriviledged user via ioport
      - fix for a re-binding problem of UDP port 2049 (NFS) sockets
      - fix for a kernel panic with pptpd when mss > mtu
      - fix for console redirect bug
      - fix for the execve() file read race vulnerability
      - fix for several race conditions in procfs
      - fix for possible DoS in netfilter code
      - fix for possible DoS in NFSv3 code

------- snip --------

Possibly some of these patches could be useful for the gentoo-sources, some of
them may have already been included in the gentoo-sources.

What I propose is considering whether these security patches concerning network
code from 
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/kernel-source-2.4.20.SuSE-100.i586.patch.rpm
(file from 12. August 2003 at time of writing) are worth going into
gentoo-sources or not.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

- fix for possible DoS in netfilter code
has probably been fixed by gentoo-sources 2.4.20-r6, not sure about the other ones

This bug was fixed and a GLSA went out.
http://forums.gentoo.org/viewtopic.php?t=75555