We have moved to a new Sailfish OS Forum. Please start new discussions there.

Revision history [back]

click to hide/show revision 1
initial version

posted 2016-08-19 12:10:10 +0200

vulnerability tcp RFC 5961 of linux kernel since v3.6

Hello all

I Don't know if a lots of people already aware about it. Seems not to be after tjc research

shortly on the usenix security conference was reported from a vulnerability on the TCP Protocol RFC 5961.
As i understand This Version is already implemented into the Linux Kernel since V3.6 but not in windows and ios.

this leak give the possibility to someone making an attack of type man in the middle.

Here is a link with more precision:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5696

Seems that already a lot's a people tracked the leak and have a patch for it...

Have a nice sail

vulnerability tcp RFC 5961 of linux kernel since v3.6

Hello all

I Don't know if a lots of people already aware about it. Seems not to be after tjc research

shortly on the usenix security conference was reported from a vulnerability on the TCP Protocol RFC 5961.
As i understand This Version is already implemented into the Linux Kernel since V3.6 but not in windows and ios.

this leak give the possibility to someone making an attack of type man in the middle.

Here is a link with more precision:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5696

Seems that already a lot's a people tracked the leak and have a patch for it...

Have a nice sail

vulnerability tcp RFC 5961 of linux kernel since v3.6

Hello all

I Don't know if a lots of people already aware about it. Seems not to be after tjc research

shortly on the usenix security conference was reported from a vulnerability on the TCP Protocol RFC 5961.
As i understand This Version is already implemented into the Linux Kernel since V3.6 but not in windows and ios.

this leak give the possibility to someone making an attack of type man in the middle.

Here is a link with more precision:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5696

Seems that already a lot's a people tracked the leak and have a patch for it...

Now comes the question:
Jolla is able to update the kernel? if the patch is ready, that would be nice to have it. One possible workaround has appeared. But may be a workaround a good and certified alternative?

Have a nice sail

vulnerability tcp RFC 5961 of linux kernel since v3.6v3.2

Hello all

I Don't know if a lots of people already aware about it. Seems not to be after tjc research

shortly on the usenix security conference was reported from a vulnerability on the TCP Protocol RFC 5961.
As i understand This Version is already implemented into the Linux Kernel since V3.6 but not in windows and ios.

this leak give the possibility to someone making an attack of type man in the middle.

Here is a link with more precision:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5696

Seems that already a lot's a people tracked the leak and have a patch for it...

Now comes the question:
Jolla is able to update the kernel? if the patch is ready, that would be nice to have it. One possible workaround has appeared. But may be a workaround a good and certified alternative?

Have a nice sail

vulnerability tcp RFC 5961 of linux kernel since v3.2

Hello all

I Don't know if a lots of people already aware about it. Seems not to be after tjc research

shortly on the usenix security conference was reported from a vulnerability on the TCP Protocol RFC 5961.
As i understand This Version is already implemented into the Linux Kernel since V3.6 but not in windows and ios.

this leak give the possibility to someone making an attack of type man in the middle.

Here is a link with more precision:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5696

Seems that already a lot's a people tracked the leak and have a patch for it...

Now comes the question:
Jolla is able to update the kernel? if the patch is ready, that would be nice to have it. One possible workaround has appeared. But may be a workaround a good and certified alternative?

Edit 04.05.2018: Fix is still not done for JP1
When may we expect to have it in our precious one? Does jolla may give a short word about it from their plan?

Have a nice sail