Debian plugs Linux 'TCP snoop' bug

Debian's maintainers have moved to plug the TCP snooping flaw that emerged in August 2016. The bug, CVE-2016-5696, was spotted by University of California Riverside's Zhiyun Qian and his collaborators and published in August. It enabled an attack against Linux (and Android) implementations of RFC 5961, which used challenge …

[AnonFairBinary]

Happy Labour Day Canadian Sysadmins...

We are not part of the US but we have compatible holidays...

[Anonymous Coward]

Re: Happy Labour Day Canadian Sysadmins...

> We are not part of the US but we have compatible holidays...

but you can spell properly!

[Stevie]

Re: Happy Labour Day Canadian Sysadmins...

Oxford English: p-r-o-p-e-r-l-y

Merriam-Webster: p-r-o-p-e-r-l-y

WTF?

[Robert Carnegie]

If you have Ubuntu...

Wait?

Or, from my ill informed reading, you can install kernel 4.7 instead to get rid of the TCP problem?

[keb]

It would not have not affected Tor that way, as a developer explains:

https://blog.patternsinthevoid.net/cve-2016-5696-and-its-effects-on-tor.html

Also the patch mentioned there fixes it.