Bug #41772
Add patch to address FreeBSD-SA-18:10.ip
Description
FreeBSD announced two issues, potentially affecting FreeNAS and TrueNAS users:
https://security.freebsd.org/advisories/FreeBSD-SA-18:09.l1tf.asc
https://security.freebsd.org/advisories/FreeBSD-SA-18:10.ip.asc
Related issues
Associated revisions
History
#1
Updated by Alexander Motin over 2 years ago
- Status changed from Unscreened to Ready for Testing
PR to freenas/11-stable: https://github.com/freenas/os/pull/138
The fact of merge can be checked by presence of sysctls:
hw.vmm.vmx.l1d_flush
net.inet.ip.maxfrags
net.inet6.ip6.maxfragbucketsize
Would be nice to check bhyve still working, and ideally its performance not being too much worse.
#2
Updated by Alexander Motin over 2 years ago
Patches for FreeBSD-SA-18:09.l1tf.asc do not apply clean to FreeNAS 11.1, so I am going to skip them. FreeNAS users should soon get 11.2, while on TrueNAS we do not use bhyve.
PR for freenas/11.1-stable: https://github.com/freenas/os/pull/139
#3
Updated by Dru Lavigne over 2 years ago
- Target version changed from 11.2-BETA3 to 11.1-U6
#4
Updated by Dru Lavigne over 2 years ago
- Status changed from Ready for Testing to In Progress
#5
Updated by Alexander Motin over 2 years ago
- Status changed from In Progress to Ready for Testing
#6
Updated by Dru Lavigne over 2 years ago
- Copied to Bug #41838: Patch FreeBSD-SA-18:09.l1tf and FreeBSD-SA-18:10.ip added
#7
Updated by Dru Lavigne over 2 years ago
- Subject changed from Patch FreeBSD-SA-18:09.l1tf FreeBSD-SA-18:10.ip to Patch FreeBSD-SA-18:10.ip
#9
Updated by Bonnie Follweiler over 2 years ago
- Status changed from Ready for Testing to Passed Testing
- Needs QA changed from Yes to No
Passed Test in FreeNAS 11,1-U6 Internal5
#10
Updated by Dru Lavigne over 2 years ago
- Subject changed from Patch FreeBSD-SA-18:10.ip to Add patch to address FreeBSD-SA-18:10.ip
- Needs Merging changed from Yes to No
#11
Updated by Dru Lavigne over 2 years ago
- Status changed from Passed Testing to Done
- Needs Doc changed from Yes to No
11.1-stable doc commit: https://github.com/freenas/freenas-docs/commit/808591286e682e0bb8e4012ce653cee2f3ce0930