From owner-freebsd-security Thu Jul 13 11:27:42 2000 Delivered-To: freebsd-security@freebsd.org Received: from jade.chc-chimes.com (jade.chc-chimes.com [216.28.46.6]) by hub.freebsd.org (Postfix) with ESMTP id 0A41B37C559; Thu, 13 Jul 2000 11:27:39 -0700 (PDT) (envelope-from billf@jade.chc-chimes.com) Received: by jade.chc-chimes.com (Postfix, from userid 1001) id A4B861C66; Thu, 13 Jul 2000 14:27:35 -0400 (EDT) Date: Thu, 13 Jul 2000 14:27:35 -0400 From: Bill Fumerola To: Robert Watson Cc: Brett Glass , security@FreeBSD.ORG Subject: Re: Two kinds of advisories? Message-ID: <20000713142735.K4034@jade.chc-chimes.com> References: <4.3.2.7.2.20000713120631.04d53b60@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from rwatson@FreeBSD.ORG on Thu, Jul 13, 2000 at 02:21:09PM -0400 X-Operating-System: FreeBSD 3.3-STABLE i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Jul 13, 2000 at 02:21:09PM -0400, Robert Watson wrote: > That was the whole point of putting "ports" in there in the first place, a > relatively recent change. The advisories are very careful to distinguish > the ports/packages from the base system, and to disclaim responsibility > for them. I think we've done the right thing as it stands. At some > point, people will need to understand that distinction for themselves. Well, it is when we do it right. See the "ports advisory" for the recent ipopts pagefault stuff. -- Bill Fumerola - Network Architect / Computer Horizons Corp - CHIMES e-mail: billf@chimesnet.com / billf@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message