Security bugs are reported here via bugzilla

[Seth Alan Woolley <seth AT positivism.org>]

You actually need a tcp option checking rule in netfilter to get this DoS:

http://www.netfilter.org/security/2004-06-30-2.6-tcpoption.html

included for the picky.

The following files are attached for spell kernels/linux:
BUILD
CONFIGURE
DEPENDS
DETAILS
GPGPATCH
grsecurity.gpg
HISTORY
kernel.gpg
KERNELS
MD5PATCH
mk.2.6.diff
patches/
patches/ck
patches/dm
patches/sm
patches/uv
patches/ben
patches/i2c
patches/xfs
patches/acpi
patches/dsdt
patches/kgdb
patches/lufs
patches/mppe
patches/wolk
patches/cpufreq
patches/grsecurity
patches/bluez
patches/packetcd
patches/latency
patches/cryptoapi_patch
patches/i2csec
patches/openMosix
patches/fpusec
patches/ioperm
patches/libata
patches/medley
patches/hashDoS
patches/ptrace
patches/usbdnet
patches/framebuffer
patches/nftcpopts
patches/bootsplash
patches/preempt
POST_INSTALL
PRE_BUILD
PREPARE
UPDATE_BOOTLOADER

==== //sgl/devel/grimoire/kernels/linux/HISTORY#178 - 
/home/seth/sourcemage/devel/kernels/linux/HISTORY ====
0a1,3
> 2004-07-14 Seth Woolley <seth AT tautology.org>
>       * patches/nftcpopts: netfilter tcp options DoS SECURITY FIX!
> 

-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.11020.tar.bz2
Description: Binary data

Attachment: pgpoHCtX3jL7q.pgp
Description: PGP signature