From owner-freebsd-security Thu Jul 13 13:49:30 2000 Delivered-To: freebsd-security@freebsd.org Received: from p01mail03.midata.com (p01mail03.midata.com [207.250.225.33]) by hub.freebsd.org (Postfix) with ESMTP id 5D25637C6A1; Thu, 13 Jul 2000 13:49:20 -0700 (PDT) (envelope-from Bob.Gorichanaz@midata.com) Received: from p51mail02.midata.com (localhost [127.0.0.1]) by p01mail03.midata.com (Pro-8.9.3/Pro-8.9.3) with ESMTP id PAA29011; Thu, 13 Jul 2000 15:48:31 -0500 (CDT) From: Bob.Gorichanaz@midata.com Subject: Re: Two kinds of advisories? To: kris@FreeBSD.ORG Cc: brett@lariat.org, wes@softweyr.com, dga@POBOX.COM, security@FreeBSD.ORG X-Mailer: Lotus Notes Release 5.0.2a November 23, 1999 Message-ID: Date: Thu, 13 Jul 2000 15:48:56 -0500 X-MIMETrack: Serialize by Router on DSGATE02/MICORPEX/US(Release 5.0.2a |November 23, 1999) at 07/13/2000 03:49:10 PM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org And besides, he'll STILL get calls from clients who don't know what software they have INSTALLED! The phone conversation will go from: Client: "Do I have to worry about this SA?" Tech: "Nope, it has to do with the PORTS collection, as indicated in the subject line" to: Client: "Do I have to worry about this SA?" Tech: "Nope, it has to do with the PORTS collection, and you don't have this port installed" -=bob=- Kris Kennaway @FreeBSD.ORG on 07/13/2000 03:44:13 PM Sent by: owner-freebsd-security@FreeBSD.ORG Sent From the mail file of: Bob Gorichanaz To: Brett Glass cc: Wes Peters , "David G. Andersen" , security@FreeBSD.ORG Subject: Re: Two kinds of advisories? On Thu, 13 Jul 2000, Brett Glass wrote: > I'm not the only one who has noticed that the current format has caused > third-party bugs to be seen as security holes in FreeBSD. Let's make it You are incorrect: the *old* naming scheme (no mention of 'Ports') in the subject was in force when this happened. I only started putting 'Ports' in the subject on July 5th, 8 days ago. This was done with the express intention of differentiating between the two streams. > Matt's idea of numbering Ports advisories as PORTS- to > distinguish them from bugs in FreeBSD proper. "Ports" is already in the subject. If someone doesn't know what "Ports" means, how will changing the advisory numbering make any difference? Kris -- In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message