Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 30 Nov 2002 01:12:27 +0200
From:      Giorgos Keramidas <keramida@freebsd.org>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        docs@freebsd.org
Subject:   Re: [dkl@tessellated.net: Re: Providing a mechanism for port maintainers to specify an immediate package rebuild/redist to improve security response (Was Re: samba security update)]
Message-ID:  <20021129231227.GD755@gothmog.gr>
In-Reply-To: <20021129222946.GA37822@rot13.obsecurity.org>
References:  <20021129222946.GA37822@rot13.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2002-11-29 14:29, Kris Kennaway <kris@obsecurity.org> wrote:
> Can someone please review/commit this patch?
>
> Thanks,
> Kris

The patch that was attached needed two minor changes.  One of them is
stylistic.  I wrapped all the lines to 78 columns.  The second one is
a minor detail that only building would catch.  There is no
&mn.pkg_add.1; entity.  The correct entity is &man.pkg.add.1;
(i.e. the underscore is replaced by a dot).

Feel free to commit the version I have attached below, approved by me.

%%%
Index: book.sgml
===================================================================
RCS file: /home/ncvs/doc/en_US.ISO8859-1/books/porters-handbook/book.sgml,v
retrieving revision 1.256
diff -u -r1.256 book.sgml
- --- book.sgml	18 Nov 2002 09:32:53 -0000	1.256
+++ book.sgml	29 Nov 2002 23:08:05 -0000
@@ -3954,6 +3954,16 @@
         doing a commit.  If the diff is more than about 20KB, please compress
         and uuencode it; otherwise, just include it in the PR as is.</para>
 
+      <important>
+        <para>If your upgrade is motivated by security concerns or a major
+          regression in the currently committed port, please notify the
+          Package Builders <email>portmgr@FreeBSD.org</email> to request
+          immediate rebuilding and redistribution of your port's
+          package. Unsuspecting users of &man.pkg.add.1; will otherwise
+          continue to install the old version via <command>pkg_add
+          -r</command> for several weeks.</para>
+      </important>
+
       <note>
         <para>Once again, please use &man.diff.1; and not &man.shar.1; to send
           updates to existing ports!</para>
%%%

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE95/Rb1g+UGjGGA7YRAmUYAJ91FpHVrWXgLtWud2Lv7C188etWDgCfbntc
ubGIAyTZLbODJWygLIiq0yY=
=IoLF
-----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-doc" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021129231227.GD755>