From owner-freebsd-security Wed Sep 27 14:43:44 2000 Delivered-To: freebsd-security@freebsd.org Received: from fw.wintelcom.net (ns1.wintelcom.net [209.1.153.20]) by hub.freebsd.org (Postfix) with ESMTP id 764CC37B422; Wed, 27 Sep 2000 14:43:41 -0700 (PDT) Received: (from bright@localhost) by fw.wintelcom.net (8.10.0/8.10.0) id e8RLhde00562; Wed, 27 Sep 2000 14:43:39 -0700 (PDT) Date: Wed, 27 Sep 2000 14:43:39 -0700 From: Alfred Perlstein To: Mike Silbersack Cc: Kris Kennaway , sigma@pair.com, freebsd-security@FreeBSD.ORG, green@FreeBSD.ORG Subject: Re: Status of FreeBSD-SA-00:41.elf? Message-ID: <20000927144339.F9141@fw.wintelcom.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.4i In-Reply-To: ; from silby@silby.com on Wed, Sep 27, 2000 at 04:38:11PM -0500 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org * Mike Silbersack [000927 14:38] wrote: > > On Wed, 27 Sep 2000, Kris Kennaway wrote: > > > The issue is that most FreeBSD developers do not have a 3.5 machine > > available for testing - BSDi were supposed to be setting up one for us to > > use but it has not yet come through. This makes it very hard to test > > security fixes to the 3.5 branch so we don't break it by just committing > > blindly (in fact, I think we should officially drop security support for > > the 3.x branch because in practise it's not being supported for security > > fixes). I believe the problem is still not fixed in 3.5-STABLE at this > > time. > > One of the features of FreeBSD which I've found appealing in comparison to > the linuxes I've seen is the relative ease of upgrade and assurance that > your base system is secure after a simple buildworld/installworld. I > think that losing this feature for any version more than three months old > would be a serious blow to the confidence of FreeBSD users > everywhere. > [snip] Before everyone goes off the deep end: http://www.freebsd.org/cgi/cvsweb.cgi/src/lib/libc/net/res_send.c Revision 1.25.2.2 / (download) - annotate - [select for diffs] , Sat Sep 23 22:48:45 2000 UTC (3 days, 22 hours ago) by alfred People are working on 3.x, just because a single developer doesn't have the reasources at the moment to address a problem doesn't mean we aren't addressing the issues. -- -Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org] "I have the heart of a child; I keep it in a jar on my desk." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message