From owner-freebsd-questions@FreeBSD.ORG Mon Sep 14 23:22:46 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5C24E106566B for ; Mon, 14 Sep 2009 23:22:46 +0000 (UTC) (envelope-from mel.flynn+fbsd.questions@mailing.thruhere.net) Received: from mailhub.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id 2B9928FC14 for ; Mon, 14 Sep 2009 23:22:45 +0000 (UTC) Received: from smoochies.rachie.is-a-geek.net (mailhub.rachie.is-a-geek.net [192.168.2.11]) by mailhub.rachie.is-a-geek.net (Postfix) with ESMTP id 9D38F7E818 for ; Mon, 14 Sep 2009 15:22:58 -0800 (AKDT) From: Mel Flynn To: freebsd-questions@freebsd.org Date: Tue, 15 Sep 2009 01:22:43 +0200 User-Agent: KMail/1.12.1 (FreeBSD/8.0-BETA4; KDE/4.3.1; i386; ; ) References: <4AAE95B2.5050409@sitpub.com> <20090914214642.GA12828@Grumpy.DynDNS.org> In-Reply-To: <20090914214642.GA12828@Grumpy.DynDNS.org> MIME-Version: 1.0 Content-Type: Text/Plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Message-Id: <200909150122.43566.mel.flynn+fbsd.questions@mailing.thruhere.net> Subject: Re: reporter on deadline seeks comment about reported security bug in FreeBSD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Sep 2009 23:22:46 -0000 On Monday 14 September 2009 23:46:42 David Kelly wrote: > On Mon, Sep 14, 2009 at 05:13:54PM -0400, illoai@gmail.com wrote: > > Am 2009/9/14 Dan Goodin writhed: > > > Hello, > > > > > > Dan Goodin, a reporter at technology news website The Register. > > > Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 > > > of FreeBSD has a security bug. He says he notified the FreeBSD > > > Foundation on August 29 and never got a response. We'll be writing a > > > brief article about this. Please let me know ASAP if someone cares to > > > comment. > > > > Has anyone submitted a PR about this? > > Przemyslaw Frasunek has PR's posted but none recent. IMO if a PR is not > submitted then one has *not* informed the Powers That Be. Wrong. Security bugs should be reported to the security team, not PR'd. -- Mel