Date: Thu, 16 Oct 2014 10:52:02 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net> Cc: freebsd-net@freebsd.org, freebsd-virtualization@freebsd.org, freebsd-arch <freebsd-arch@freebsd.org> Subject: Re: Enabling VIMAGE by default for FreeBSD 11? Message-ID: <86d29so0r1.fsf@nine.des.no> In-Reply-To: <7EAA2A23-06F9-44C9-A3E1-62AA37EE5CDA@lists.zabbadoz.net> (Bjoern A. Zeeb's message of "Mon, 13 Oct 2014 01:07:55 %2B0000") References: <CAG=rPVe_JGy%2BeUiDjHaXXi5=n2mWGOeZjHkbVeUeS_m1z1_uMg@mail.gmail.com> <20141012182551.002b3cc0a45a56d3f34e6174@yamagi.org> <3B4471A7-CDF4-440D-BDD8-3D5B2256B8DD@lists.zabbadoz.net> <CAG=rPVdFzgvEo2vR5omnDnHDisU4k0tmTo8AFOg81q12bgwgBg@mail.gmail.com> <7EAA2A23-06F9-44C9-A3E1-62AA37EE5CDA@lists.zabbadoz.net>
next in thread | previous in thread | raw e-mail | index | archive | help
"Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net> writes: > Also if people are seriously thinking about virtualising pf we need to > import the openbsd/apple pf fix from a few years ago because otherwise > people in virtualised stacks with a /dev/pf can do ugly things. I > think it=E2=80=99s been this one: > http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2010-3830 There are other serious issues with our current pf (checksum corruption) which I think can only be resolved by importing a newer version. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86d29so0r1.fsf>