Date: Sat, 20 Oct 2007 18:18:38 -0700 From: Colin Percival <cperciva@freebsd.org> To: Robert Watson <rwatson@FreeBSD.org> Cc: freebsd-security@FreeBSD.org Subject: Re: missing Advisory at ftp.freebsd.org Message-ID: <471AA8EE.7050406@freebsd.org> In-Reply-To: <20071021015451.U70919@fledge.watson.org> References: <1191595847.2850.21.camel@amd.uni.vrs> <47065710.6090702@freebsd.org> <20071021015451.U70919@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson wrote: > On Fri, 5 Oct 2007, Colin Percival wrote: >>> ftp://ftp.freebsd.org/CERT/ >> >> We stopped uploading advisories there because we kept on running into >> problems with ftp mirrors being out of date, while have complete >> control over the security.freebsd.org webserver and can make sure >> files are there before we send out the advisory. > > Sounds like we should remove this from ftp-master so it stops being > replicated, or at least put a note there about it being historic. Any > preference on which? It would be easy for me to put a warning and > redirection at the top of README or rename CERT to CERT.old. All of the old advisories point to ftp.freebsd.org (both as "the latest revision of this advisory can be found at" and for the patches), so we should leave the existing files there for the near future at least. Adding a README pointing people towards security.freebsd.org sounds like the best option to me. Colin Percival
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?471AA8EE.7050406>