From owner-freebsd-security Mon Feb 3 13:38:56 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id NAA22126 for security-outgoing; Mon, 3 Feb 1997 13:38:56 -0800 (PST) Received: from anacreon.sol.net (anacreon.sol.net [206.55.64.116]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id NAA22049; Mon, 3 Feb 1997 13:37:46 -0800 (PST) Received: from solaria.sol.net (solaria.sol.net [206.55.65.75]) by anacreon.sol.net (8.6.12/8.6.12) with ESMTP id PAA18490; Mon, 3 Feb 1997 15:37:44 -0600 Received: from localhost by solaria.sol.net (8.5/8.5) id PAA20783; Mon, 3 Feb 1997 15:17:07 -0600 From: Joe Greco Message-Id: <199702032117.PAA20783@solaria.sol.net> Subject: Re: Question: 2.1.7? To: joerg_wunsch@uriah.heep.sax.de Date: Mon, 3 Feb 97 15:17:05 CST Cc: security@freebsd.org, core@freebsd.org In-Reply-To: from "J Wunsch" at Feb 3, 97 10:05:12 pm X-Mailer: ELM [version 2.4dev PL65] MIME-Version: 1.0 Content-Type: text Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > As Joe Greco wrote: > > > If not, maybe a "patchkit" that could be installed (source or binary, > > whatever) could be done. But I think a "2.1.7" type release would be > > most ideal... > > I think our basic position to this is that we don't mind, as long as > somebody is going to do the work. We are simply unable to maintain > three diverging branches. I'm willing to put up or shut up, since I'm having to do the work locally here anyways (at least for the issues that are an issue here). If someone is willing to commit the changes, I do not mind feeding the needed changes(*), many of which have been applied to 2.2 or 3.0 anyways, to them. (*)That is not a blanket statement saying I'll do every BugTraq bug that comes along, but I would love nothing more than to fold in the changes that I have to support locally anyways. I _immediately_ have crt0 patches for today's BugTraq of the day, and the talkd exploit, etc. I realize the 2.1.X branch is "semi dead" but it is also very stable. I am running 2.2 on several key systems, but do not wish to commit to it entirely until it's proven its stability over a six month period. I mean, my Web server has been up 180 days!!!!!! 3:34PM up 180 days, 17 mins, 1 user, load averages: 0.00, 0.00, 0.00 Fantastic... that beats any SunOS records I can recall. I want to be running all 2.2 within a year, but until then, I am sure that many of us will want to see 2.1 vulnerabilities fixed. As I said, I won't promise to do it all, but I will certainly contribute anything I can. I just need someone to commit the stuff. ... Joe ------------------------------------------------------------------------------- Joe Greco - Systems Administrator jgreco@ns.sol.net Solaria Public Access UNIX - Milwaukee, WI 414/342-4847