On 16 Oct 2014, at 08:52 , Dag-Erling Smørgrav <d...@des.no> wrote:
> "Bjoern A. Zeeb" <bzeeb-li...@lists.zabbadoz.net> writes: >> Also if people are seriously thinking about virtualising pf we need to >> import the openbsd/apple pf fix from a few years ago because otherwise >> people in virtualised stacks with a /dev/pf can do ugly things. I >> think it’s been this one: >> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830 > > There are other serious issues with our current pf (checksum corruption) > which I think can only be resolved by importing a newer version. Sorry, but you lost context. I was talking about security implications in VIMAGE context, not about random bugs. — Bjoern A. Zeeb "Come on. Learn, goddamn it.", WarGames, 1983 _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"