- Improve entries in response to bjk's and des' (private) feedback

This commit is contained in:
Gabor Pali 2013-07-09 07:05:19 +00:00
parent 74f9e97bcd
commit 1172278bd6
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=42203

View file

@ -1061,7 +1061,7 @@
<body>
<p>On April 15th Dag-Erling Sm&oslash;rgrav and Xin Li took over
as security officers for the &os; Project, and the team welcomed
Qing Li back in the team in June. This report briefly
Qing Li back to the team in June. This report briefly
summarizes the work of the Security Team from April until the
end of June.</p>
@ -1074,20 +1074,27 @@
<li><tt>FreeBSD-SA-13:06.mmap</tt>: Privilege escalation via
<tt>mmap()</tt>, reported by Konstantin Belousov.</li>
<li><tt>FreeBSD-EN-13:02.vtnet</tt>: <tt>vtnet(4)</tt>
network interface issue on QEMU 1.4.0 and later in 8.4-RELEASE,
reported by Julian Stecklina.</li>
<li><tt>FreeBSD-EN-13:01.fxp</tt>: <tt>dhclient(8)</tt> utility
issue on <tt>fxp(4)</tt> network interface in 8.4-RELEASE,
reported by Michael L. Squires.</li>
</ul>
<p>Per request of Baptiste Daroussin, the Security Team has also
reviewed the source code of Poudriere, the port build and test
system which is planned to be used for producing <tt>pkg(8)</tt>
("new-style") packages on the &os; cluster.</p>
<p>The Security Team has contributed to the following errata
notices:</p>
<ul>
<li><tt>FreeBSD-EN-13:02.vtnet</tt>: Frames are not properly
forwarded to <tt>vtnet(4)</tt> when two or more MAC addresses
are configured on QEMU 1.4.0 and later in 8.4-RELEASE,
reported by Julian Stecklina.</li>
<li><tt>FreeBSD-EN-13:01.fxp</tt>: Initialization of
<tt>fxp(4)</tt> network interfaces results in an infinite loop
with <tt>dhclient(8)</tt> in 8.4-RELEASE, reported by Michael
L. Squires.</li>
</ul>
<p>Per the request of Baptiste Daroussin, the Security Team has
also reviewed the source code of Poudriere, the port build and
test system which is planned to be used for producing
<tt>pkg(8)</tt> ("new-style") packages on the &os; cluster.</p>
</body>
</project>
@ -1173,10 +1180,11 @@
<body>
<p>During the beginning of this quarter, work focused on making
the <tt>xorg</tt> update as robust and stable as possible in
preparation for the merge to ports. As part of this exp-run
were made, to find and resolve regressions and other issues.
Once this was completed, <tt>xorg</tt> was updated to version
7.7 on May 25, after more than a year of hard work.</p>
preparation for the merge to ports. As a part of this, ports
exp-runs were performed to find and resolve regressions and
other issues. Once this was completed, <tt>xorg</tt> was
updated to version 7.7 on May 25, after more than a year of hard
work.</p>
<p>After the update, work immediately shifted to focus on updating
and patching <tt>xorg</tt> client libraries, since numerous
@ -1205,16 +1213,16 @@
ATI is more mature, more testing can be done.</task>
<task>Port Wayland. The future of graphical environments in open
source operating system seem to be Wayland. This needs to be
source operating system seems to be Wayland. This needs to be
ported to &os; so that a wider audience can test it, and so that
it eventually can be integrated into the ports tree, perhaps as
a replacement for the current <tt>xorg</tt>.</task>
<task>Look into replacements for HAL. HAL is used for
hot-plugging of devices, but it has been long abandoned by Linux.
A replacement, perhaps build on top of devd would be nice to
have. This work should be coordinated with the &os; GNOME and
KDE teams.</task>
hot-plugging of devices, but it has been long abandoned by
Linux. A replacement, perhaps build on top of <tt>devd(8)</tt>,
would be nice to have. This work should be coordinated with the
&os; GNOME and KDE teams.</task>
</help>
</project>
</report>