Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Nov 2014 07:58:39 -0800
From:      Loganaden Velvindron <logan@elandsys.com>
To:        "Bjoern A. Zeeb" <bz@freebsd.org>
Cc:        FreeBSD Net <freebsd-net@freebsd.org>, "freebsd-virtualization@freebsd.org" <freebsd-virtualization@freebsd.org>, freebsd-arch <freebsd-arch@freebsd.org>
Subject:   Re: VIMAGE + pf security fix?
Message-ID:  <20141121155839.GA15001@mx.elandsys.com>
In-Reply-To: <D6419901-F61B-4599-B4AA-D3E64A79C690@FreeBSD.org>
References:  <CAG=rPVfRmoaGvcCnDdBSF6=NxEfi7=PhbQkncb6Z_WrRMZtjmQ@mail.gmail.com> <CAG=rPVewFvRWhVAk-3_A8NS2_MbymsX1wBQbcbOfg6RgTfiw1w@mail.gmail.com> <D6419901-F61B-4599-B4AA-D3E64A79C690@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Nov 21, 2014 at 10:52:05AM +0000, Bjoern A. Zeeb wrote:
> 
> On 21 Nov 2014, at 08:06 , Craig Rodrigues <rodrigc@FreeBSD.org> wrote:
> 
> > On Thu, Nov 20, 2014 at 10:07 AM, Craig Rodrigues <rodrigc@freebsd.org>
> > wrote:
> > 
> >> On Wed, Nov 19, 2014 at 6:05 AM, Bjoern A. Zeeb <bz@freebsd.org> wrote:
> >> 
> >>> 
> >>> For people to use pf with VIMAGE we first MUST have the security fix
> >>> imported that I pointed out a couple of times in the past.
> >>> 
> >> 
> >> At this link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830
> >> 
> >> I see the security issue mentioned, but I can't find the patch that fixes
> >> the problem.
> >> Where is the patch?
> >> 
> > 
> > I read this link:
> > http://esec-lab.sogeti.com/post/2010/12/09/CVE-2010-3830-iOS-4.2.1-packet-filter-local-kernel-vulnerability
> > 
> > and I think this is the fix:
> > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_ioctl.c?rev=1.236&content-type=text/x-cvsweb-markup
> > 
> > but I can?t even apply that patch to our pf_ioctl.c.
> 
> to my best knowledge we have never pulled a fix for this in.  The last ?sync? of pf was way before that vulnerability (unless I completely missed something).

I'd be interested in helping to fix this, as I depend on this.


> 
> ? 
> Bjoern A. Zeeb             "Come on. Learn, goddamn it.", WarGames, 1983
> 
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20141121155839.GA15001>