&os; Security Team

From owner-svn-doc-all@FreeBSD.ORG Sun Jul 7 05:33:34 2013 Return-Path: Delivered-To: svn-doc-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 2752BBFB; Sun, 7 Jul 2013 05:33:34 +0000 (UTC) (envelope-from pgj@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id EE0E31191; Sun, 7 Jul 2013 05:33:33 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r675XXKl058778; Sun, 7 Jul 2013 05:33:33 GMT (envelope-from pgj@svn.freebsd.org) Received: (from pgj@localhost) by svn.freebsd.org (8.14.7/8.14.5/Submit) id r675XX5J058777; Sun, 7 Jul 2013 05:33:33 GMT (envelope-from pgj@svn.freebsd.org) Message-Id: <201307070533.r675XX5J058777@svn.freebsd.org> From: Gabor Pali Date: Sun, 7 Jul 2013 05:33:33 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r42183 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jul 2013 05:33:34 -0000 Author: pgj Date: Sun Jul 7 05:33:33 2013 New Revision: 42183 URL: http://svnweb.freebsd.org/changeset/doc/42183 Log: - Add a Q2 entry for secteam Submitted by: gnn Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2013-04-2013-06.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2013-04-2013-06.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2013-04-2013-06.xml Sat Jul 6 23:15:13 2013 (r42182) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2013-04-2013-06.xml Sun Jul 7 05:33:33 2013 (r42183) @@ -18,7 +18,7 @@

Thanks to all the reporters for the excellent work! This report - contains 18 entries and we hope you enjoy reading it.

+ contains 19 entries and we hope you enjoy reading it.

The deadline for submissions covering between July and September 2013 @@ -1037,4 +1037,51 @@ Fix x11-themes/gtk-xfce-engine with Gtk+ >=3.6. + + + &os; Security Team + + + + + &os; Security Team + + secteam@FreeBSD.org + + + + + + +

On April 15th Dag-Erling Smørgrav and Xin Li took over + as security officers for the &os; Project, and the team welcomed + Qing Li back in the team in June. This report briefly + summarizes the work of the Security Team from April until the + end of June.

+ +

The Security Team has released the following advisories:

+ +

FreeBSD-SA-13:05.nfsserver: Insufficient input + validation in the NFS server (nfsd(8)), reported by + Adam Nowacki.
FreeBSD-SA-13:06.mmap: Privilege escalation via + mmap(), reported by Konstantin Belousov.
FreeBSD-EN-13:02.vtnet: vtnet(4) + network interface issue on QEMU 1.4.0 and later in 8.4-RELEASE, + reported by Julian Stecklina.
FreeBSD-EN-13:01.fxp: dhclient(8) utility + issue on fxp(4) network interface in 8.4-RELEASE, + reported by Michael L. Squires.

+ +

Per request of Baptiste Daroussin, the Security Team has also + reviewed the source code of Poudriere, the port build and test + system which is planned to be used for producing pkg(8) + ("new-style") packages on the &os; cluster.

+ +