From owner-freebsd-security Tue Oct 3 1:47:33 2000 Delivered-To: freebsd-security@freebsd.org Received: from lucifer.ninth-circle.org (lucifer.bart.nl [194.158.168.74]) by hub.freebsd.org (Postfix) with ESMTP id 06D1A37B66C; Tue, 3 Oct 2000 01:47:25 -0700 (PDT) Received: (from asmodai@localhost) by lucifer.ninth-circle.org (8.11.0/8.11.0) id e938hGT84923; Tue, 3 Oct 2000 10:43:16 +0200 (CEST) (envelope-from asmodai) Date: Tue, 3 Oct 2000 10:43:16 +0200 From: Jeroen Ruigrok van der Werven To: Warner Losh Cc: Robert Watson , Nate Williams , Poul-Henning Kamp , James Wyatt , Brett Glass , "Chris D . Faulhaber" , security@FreeBSD.ORG Subject: Re: ftpd bug in FreeBSD through at least 3.4 Message-ID: <20001003104316.A84649@lucifer.bart.nl> References: <200010022331.RAA15790@harmony.village.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200010022331.RAA15790@harmony.village.org>; from imp@village.org on Mon, Oct 02, 2000 at 05:31:42PM -0600 Organisation: VIA Net.Works The Netherlands Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org -On [20001003 01:35], Warner Losh (imp@village.org) wrote: >In message Robert Watson writes: >: I think it is too early to write off 3-STABLE as there is a huge install >: base for the branch, and many products based on it. We don't even have a >: native Netscape build for 4-STABLE yet :-). I think it is fine to assert >: that no new feature development is occuring there, however. > >According to the security officer's long standing policy, we don't >commit to support the old stale branch after we've had two releases on >the new stable branch. This doesn't mean that we prevent people from >contributing to it, just that we don't have resources to do so. It is in my own interest to get these fixes in. People are always free to ask me to put specific pieces of code in the 3-STABLE tree in a `blessed by a freebsd.org committer' way. Keep in mind I only do support work here, make sure some code gets MFC'd which will mean 3.x will be deployable for people in the near future. -- Jeroen Ruigrok van der Werven Network- and systemadministrator VIA Net.Works The Netherlands BSD: Technical excellence at its best http://www.via-net-works.nl Grant me the serenity to accept the things I cannot change, courage to change the things I can, and wisdom to know the difference... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message