FreeBSD Security Officer | 2 Jul 00:17 2010

FreeBSD supported branches update

Hello Everyone,

The branches supported by the FreeBSD Security Officer have been updated
to reflect the EoL (end-of-life) of FreeBSD 7.2.  The new list is below
and at <URL: >.

Users of FreeBSD 7.2 are advised to upgrade promptly to a newer release,
either by downloading an updated source tree and building updates manually,
or (for i386 and amd64 systems) using the FreeBSD Update utility as
described in the relevant release announcement.

[Excerpt from follows]

Supported FreeBSD Releases

   The FreeBSD Security Officer provides security advisories for
   several branches of FreeBSD development. These are the -STABLE
   Branches and the Security Branches. (Advisories are not issued for
   the -CURRENT Branch.)

     * The -STABLE branch tags have names like RELENG_7. The
       corresponding builds have names like FreeBSD 7.0-STABLE.

     * Each FreeBSD Release has an associated Security Branch. The
       Security Branch tags have names like RELENG_7_0. The
       corresponding builds have names like FreeBSD 7.0-RELEASE-p1.

   Isses affecting the FreeBSD Ports Collection are covered in the
   FreeBSD VuXML document.
(Continue reading)

FreeBSD Security Advisories | 13 Jul 04:52 2010

FreeBSD Security Advisory FreeBSD-SA-10:07.mbuf

FreeBSD-SA-10:07.mbuf                                       Security Advisory
                                                          The FreeBSD Project

Topic:          Lost mbuf flag resulting in data corruption

Category:       core
Module:         kern
Announced:      2010-07-13
Credits:        Ming Fu
Affects:        FreeBSD 7.x and later.
Corrected:      2010-07-13 02:45:17 UTC (RELENG_8, 8.1-PRERELEASE)
                2010-07-13 02:45:17 UTC (RELENG_8_1, 8.1-RELEASE)
                2010-07-13 02:45:17 UTC (RELENG_8_0, 8.0-RELEASE-p4)
                2010-07-13 02:45:17 UTC (RELENG_7, 7.3-STABLE)
                2010-07-13 02:45:17 UTC (RELENG_7_3, 7.3-RELEASE-p2)
                2010-07-13 02:45:17 UTC (RELENG_7_1, 7.1-RELEASE-p13)
CVE Name:       CVE-2010-2693

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:>.

I.   Background

An mbuf is a basic unit of memory management in the FreeBSD kernel
inter-process communication and networking subsystem.  Network packets
and socket buffers are dependent on mbufs for their storage.

(Continue reading)

Deb Goodkin | 14 Jul 21:27 2010

Foundation Announces Resource Containers Project

Dear FreeBSD Community,

We are pleased to announce that Edward Tomasz Napierala has been awarded 
a grant to implement resource containers and a simple per-jail resource 
limits mechanism.

Unlike Solaris zones, the current implementation of FreeBSD Jails does 
not provide per-jail resource limits.  As a result, users are often 
forced to replace jails with other virtualization mechanisms.  The goal 
of this project is to create a single, unified framework for controlling
resource utilisation, and to use that framework to implement per-jail 
resource limits.  In the future, the same framework might be used to 
implement more sophisticated resource controls, such as Hierarchical 
Resource Limits, or to implement mechanisms similar to AIX WLM. It could 
also be used to provide precise resource usage accounting for 
administrative or billing purposes.

"It's great that the Foundation decided to fund this project," Edward 
noted. "It will make jail-based virtualization a much better choice in 
many scenarios, for example for Virtual Private Server providers."


The FreeBSD Foundation
freebsd-announce <at> mailing list
To unsubscribe, send any mail to "freebsd-announce-unsubscribe <at>"

(Continue reading)

Philip Paeps | 14 Jul 21:35 2010

New FreeBSD core team elected

The FreeBSD Project is pleased to announce the completion of the 2010 core
team election.  The FreeBSD core team acts as the project's "board of
directors" and is responsible for approving new src committers, resolving
disputes between developers, appointing sub-committees for specific purposes
(security officer, release engineering, port managers, webmaster, et cetera),
and making any other administrative or policy decisions as needed.  The core
team has been elected by FreeBSD developers every 2 years since 2000.

The newly elected core team is:
John Baldwin <jhb <at>>
Konstantin Belousov <kib <at>>
Wilko Bulte <wilko <at>>
Brooks Davis <brooks <at>>
Warner Losh <imp <at>>
Pav Lucistnik <pav <at>>
Colin Percival <cperciva <at>>
Hiroki Sato <hrs <at>>
Robert Watson <rwatson <at>>

The new core team would like to thank outgoing members Kris Kennaway, Peter
Wemm, Murray Stokely, George V. Neville-Neil, and Giorgos Keramidas for their
service over the past two (and in some cases, many more) years.

The core team would also especially like to thank Dag-Erling Smørgrav for
running the election.

 - Philip [core team secretary]


(Continue reading)

Deb Goodkin | 19 Jul 16:11 2010

DAHDI driver project announcement

Dear FreeBSD Community,

We are pleased to announce that Max Khon has been awarded
a grant to finish the DAHDI FreeBSD driver port.

The purpose of DAHDI/FreeBSD project is to make it possible to use
FreeBSD as a base system for software PBX solutions.

DAHDI (Digium/Asterisk Hardware Device Interface) is an open-source
device driver framework and a set of HW drivers for E1/T1, ISDN digital
and FXO/FXS analog cards ( Asterisk is
one of the most popular open-source software PBX solutions

The project includes porting DAHDI framework and HW drivers for E1/T1,
FXO/FXS analog and ISDN digital cards to FreeBSD. This also includes
TDMoE support, software and HW echo cancellation (Octasic, VPMADT032)
and HW transcoding support (TC400B). The work is ongoing in the official
DAHDI SVN repository with the close collaboration with DAHDI folks at

The project is nearing its completion: DAHDI framework and HW drivers
telephony cards has been ported and tested. There are a number of 
success stories from early adopters who use E1/T1 and FXO/FXS cards on 
FreeBSD for several months.

This project will be completed in September 2010.


(Continue reading)

Ken Smith | 24 Jul 01:58 2010

FreeBSD 8.1-RELEASE Available

The FreeBSD Release Engineering Team is pleased to announce the availability
of FreeBSD 8.1-RELEASE.  This is the second release from the 8-STABLE
branch which improves on the functionality of FreeBSD 8.0 and introduces some
new features.  Some of the highlights:

	- zfsloader added
	- zpool version of ZFS subsystem updated to version 14
	- NFSv4 ACL support in UFS and ZFS; support added to cp(1), find(1),
	  getfacl(1), mv(1), and setfacl(1) utilities
	- UltraSPARC IV/IV+, SPARC64 V support
	- SMP support in PowerPC G5
	- BIND 9.6.2-P2
	- sendmail updated to 8.14.4
	- OpenSSH updated to 5.4p1
	- GNOME 2.30.1, KDE 4.4.5

For a complete list of new features and known problems, please see the
online release notes and errata list, available at:

For more information about FreeBSD release engineering activities,
please see:

(Continue reading)

Deb Goodkin | 28 Jul 05:16 2010

The FreeBSD Foundation Semi-Annual Newsletter is Now Available

Dear FreeBSD Community,

We are pleased to announce the publication of The FreeBSD Foundation's
2010 Semi-Annual Newsletter.

Go to
to find out how we have supported the FreeBSD Project and community so 
far this year.


The FreeBSD Foundation
freebsd-announce <at> mailing list
To unsubscribe, send any mail to "freebsd-announce-unsubscribe <at>"