From owner-freebsd-questions@freebsd.org Wed Mar 16 15:44:13 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D0E1FAD3507 for ; Wed, 16 Mar 2016 15:44:13 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A17A5B73 for ; Wed, 16 Mar 2016 15:44:13 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id u2GFi7cY011701 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 16 Mar 2016 09:44:07 -0600 (MDT) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id u2GFi7K7011694; Wed, 16 Mar 2016 09:44:07 -0600 (MDT) (envelope-from wblock@wonkity.com) Date: Wed, 16 Mar 2016 09:44:07 -0600 (MDT) From: Warren Block To: Doug Hardie cc: FreeBSD Questions , Polytropon Subject: Re: Upcoming Releases In-Reply-To: Message-ID: References: <20160305181742.9c3abe96.freebsd@edvax.de> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (wonkity.com [127.0.0.1]); Wed, 16 Mar 2016 09:44:07 -0600 (MDT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Mar 2016 15:44:13 -0000 On Tue, 15 Mar 2016, Doug Hardie wrote: > >> On 15 March 2016, at 21:11, Warren Block wrote: >> >> On Wed, 9 Mar 2016, Doug Hardie wrote: >> >>> I recently saw a comment in one of the maillists that 11.0 was likely to have the new packetized base feature. That tells me that 11.0 is most likely to be dicey to work with. I am reminded when the new pkg system came out and the supporting servers were compromised. >> >> To the best of my knowledge, there was no relation between pkg and any compromises. > > There was a period where the regular pkg servers were not available because they had to be rebuilt. I don't recall the dates. It was not pkg_ng, but the first major revision to pkg after that. Sure. But many systems were rebuilt at that time, it was a concern over security in general, not pkg specifically.