From owner-freebsd-hackers Mon Mar 20 14:21:21 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from brain.proaxis.com (brain.proaxis.com [206.163.142.1]) by hub.freebsd.org (Postfix) with ESMTP id 4FB2F37B8B8; Mon, 20 Mar 2000 14:21:06 -0800 (PST) (envelope-from cdinsmore@vatyx.com) Received: from proxyserver (pd02-56.inet-x.net [206.163.153.120]) by brain.proaxis.com (8.9.3/8.9.3) with SMTP id OAA06343; Mon, 20 Mar 2000 14:20:54 -0800 (PST) Received: by proxyserver (VPOP3) with SMTP; Mon, 20 Mar 2000 14:25:20 -0800 Received: by SERVER with Internet Mail Service (5.0.1457.3)id ; Mon, 20 Mar 2000 14:24:51 -0800 Message-ID: From: Casey Dinsmore To: Dave McKay , freebsd-security@FreeBSD.ORG Cc: freebsd-hackers@FreeBSD.ORG Subject: RE: ports security advisories.. Date: Mon, 20 Mar 2000 14:24:48 -0800 X-Priority: 3 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.0.1457.3) Content-Type: text/plain X-Server: VPOP3 V1.2.0d - Registered to: Vatyx, Inc. Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I think that it is a necessary thing to do, since these programs are offered in the ports collection, and this is -security after all. It was nice and convienant to have the advisories posted because I just happened to have completed installing lynx-ssl from the ports collection mere hours before they were posted on wednesday. Casey Dinsmore Webmaster / Network Administrator Vatyx, Inc. cdinsmore@vatyx.com http://www.vatyx.com Phone: 541.929.6496 Fax: 541.929.2251 > -----Original Message----- > From: Dave McKay [SMTP:dave@mu.org] > Sent: Monday, March 20, 2000 1:46 PM > To: freebsd-security@FreeBSD.ORG > Cc: freebsd-hackers@FreeBSD.ORG > Subject: ports security advisories.. > > Is it really necessary to post the ports security advisories? > The exploitable programs are not part of the FreeBSD OS, they > are third party software. I think the proper place for these > is the Bugtraq mailing list on securityfocus.com. Also to add > to the arguments, most of the advisories are not FreeBSD > specific. > > -- > Dave McKay > Network Engineer - Google Inc. > dave@mu.org - dave@google.com > I'm feeling lucky... << File: ATT00142.ATT >> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message