From owner-freebsd-security@FreeBSD.ORG Mon Nov 24 22:35:43 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 95BEC106564A for ; Mon, 24 Nov 2008 22:35:43 +0000 (UTC) (envelope-from davidski@deadheaven.com) Received: from geoff.deadheaven.com (geoff.deadheaven.com [216.162.200.43]) by mx1.freebsd.org (Postfix) with ESMTP id 6E19A8FC1B for ; Mon, 24 Nov 2008 22:35:43 +0000 (UTC) (envelope-from davidski@deadheaven.com) Received: from localhost (localhost [127.0.0.1]) by geoff.deadheaven.com (Postfix) with ESMTP id 30B2F1567C2C for ; Mon, 24 Nov 2008 14:20:33 -0800 (PST) X-Virus-Scanned: amavisd-new at deadheaven.com Received: from geoff.deadheaven.com ([127.0.0.1]) by localhost (geoff.deadheaven.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id cQeT8nL6k6qm for ; Mon, 24 Nov 2008 14:20:30 -0800 (PST) Received: by geoff.deadheaven.com (Postfix, from userid 1001) id E09DE1567C29; Mon, 24 Nov 2008 14:20:29 -0800 (PST) Date: Mon, 24 Nov 2008 14:20:29 -0800 From: "David F. Severski" To: freebsd-security@freebsd.org Message-ID: <20081124222029.GM85200@geoff.deadheaven.com> References: <200811230855.mAN8tmXo091500@freefall.freebsd.org> <731a66520811241055x62a013at71bc1d08bcc6bda8@mail.gmail.com> <492B2242.4080102@vwsoft.com> <731a66520811241406r6269274ft8a41666efd85560d@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <731a66520811241406r6269274ft8a41666efd85560d@mail.gmail.com> User-Agent: Mutt/1.5.18 (2008-05-17) Subject: Re: ports/128999: [vuxml] [patch] update audio/streamripper to 1.64.0, fix CVE-2008-4829 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Nov 2008 22:35:43 -0000 On Mon, Nov 24, 2008 at 11:06:56PM +0100, William Palfreman wrote: > That's nice. I am sure it is very useful on the ports mailinglist > where it belongs. I also greatly enjoy the frequent interesting and > informed discussion on the security mailinglist - of which Eirik > Overby's thread recently about syn+fin is one example. But all these > ports announcements, raw patches, garbled html etc. I could really do > without. It is why there are separate lists. Was there a discussion or even an announcement indicating that the security-related port commit messages would be sent to freebsd-security? This seems to have started just this month. Like William, I also find the explosion of commit messages and bug tracking minutia detracts from the low volume and high value of the freebsd-security list. The list description on mailman indicates the intent of the list is to be a 'high-signal, low-noise discussion of issues affecting the security of FreeBSD.' Including every single obliquely security related port commit seems counter to this intention. I'd very much like to see a separate list for the automated port postings, leaving this list to it's historical usage. David