- Improve entries in response to bjk's and des' (private) feedback
This commit is contained in:
parent
74f9e97bcd
commit
1172278bd6
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=42203
1 changed files with 30 additions and 22 deletions
|
@ -1061,7 +1061,7 @@
|
|||
<body>
|
||||
<p>On April 15th Dag-Erling Smørgrav and Xin Li took over
|
||||
as security officers for the &os; Project, and the team welcomed
|
||||
Qing Li back in the team in June. This report briefly
|
||||
Qing Li back to the team in June. This report briefly
|
||||
summarizes the work of the Security Team from April until the
|
||||
end of June.</p>
|
||||
|
||||
|
@ -1074,20 +1074,27 @@
|
|||
|
||||
<li><tt>FreeBSD-SA-13:06.mmap</tt>: Privilege escalation via
|
||||
<tt>mmap()</tt>, reported by Konstantin Belousov.</li>
|
||||
|
||||
<li><tt>FreeBSD-EN-13:02.vtnet</tt>: <tt>vtnet(4)</tt>
|
||||
network interface issue on QEMU 1.4.0 and later in 8.4-RELEASE,
|
||||
reported by Julian Stecklina.</li>
|
||||
|
||||
<li><tt>FreeBSD-EN-13:01.fxp</tt>: <tt>dhclient(8)</tt> utility
|
||||
issue on <tt>fxp(4)</tt> network interface in 8.4-RELEASE,
|
||||
reported by Michael L. Squires.</li>
|
||||
</ul>
|
||||
|
||||
<p>Per request of Baptiste Daroussin, the Security Team has also
|
||||
reviewed the source code of Poudriere, the port build and test
|
||||
system which is planned to be used for producing <tt>pkg(8)</tt>
|
||||
("new-style") packages on the &os; cluster.</p>
|
||||
<p>The Security Team has contributed to the following errata
|
||||
notices:</p>
|
||||
|
||||
<ul>
|
||||
<li><tt>FreeBSD-EN-13:02.vtnet</tt>: Frames are not properly
|
||||
forwarded to <tt>vtnet(4)</tt> when two or more MAC addresses
|
||||
are configured on QEMU 1.4.0 and later in 8.4-RELEASE,
|
||||
reported by Julian Stecklina.</li>
|
||||
|
||||
<li><tt>FreeBSD-EN-13:01.fxp</tt>: Initialization of
|
||||
<tt>fxp(4)</tt> network interfaces results in an infinite loop
|
||||
with <tt>dhclient(8)</tt> in 8.4-RELEASE, reported by Michael
|
||||
L. Squires.</li>
|
||||
</ul>
|
||||
|
||||
<p>Per the request of Baptiste Daroussin, the Security Team has
|
||||
also reviewed the source code of Poudriere, the port build and
|
||||
test system which is planned to be used for producing
|
||||
<tt>pkg(8)</tt> ("new-style") packages on the &os; cluster.</p>
|
||||
</body>
|
||||
</project>
|
||||
|
||||
|
@ -1173,10 +1180,11 @@
|
|||
<body>
|
||||
<p>During the beginning of this quarter, work focused on making
|
||||
the <tt>xorg</tt> update as robust and stable as possible in
|
||||
preparation for the merge to ports. As part of this exp-run
|
||||
were made, to find and resolve regressions and other issues.
|
||||
Once this was completed, <tt>xorg</tt> was updated to version
|
||||
7.7 on May 25, after more than a year of hard work.</p>
|
||||
preparation for the merge to ports. As a part of this, ports
|
||||
exp-runs were performed to find and resolve regressions and
|
||||
other issues. Once this was completed, <tt>xorg</tt> was
|
||||
updated to version 7.7 on May 25, after more than a year of hard
|
||||
work.</p>
|
||||
|
||||
<p>After the update, work immediately shifted to focus on updating
|
||||
and patching <tt>xorg</tt> client libraries, since numerous
|
||||
|
@ -1205,16 +1213,16 @@
|
|||
ATI is more mature, more testing can be done.</task>
|
||||
|
||||
<task>Port Wayland. The future of graphical environments in open
|
||||
source operating system seem to be Wayland. This needs to be
|
||||
source operating system seems to be Wayland. This needs to be
|
||||
ported to &os; so that a wider audience can test it, and so that
|
||||
it eventually can be integrated into the ports tree, perhaps as
|
||||
a replacement for the current <tt>xorg</tt>.</task>
|
||||
|
||||
<task>Look into replacements for HAL. HAL is used for
|
||||
hot-plugging of devices, but it has been long abandoned by Linux.
|
||||
A replacement, perhaps build on top of devd would be nice to
|
||||
have. This work should be coordinated with the &os; GNOME and
|
||||
KDE teams.</task>
|
||||
hot-plugging of devices, but it has been long abandoned by
|
||||
Linux. A replacement, perhaps build on top of <tt>devd(8)</tt>,
|
||||
would be nice to have. This work should be coordinated with the
|
||||
&os; GNOME and KDE teams.</task>
|
||||
</help>
|
||||
</project>
|
||||
</report>
|
||||
|
|
Loading…
Reference in a new issue