From owner-freebsd-security@FreeBSD.ORG Sun Oct 21 17:34:46 2007 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E171216A421 for ; Sun, 21 Oct 2007 17:34:46 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42]) by mx1.freebsd.org (Postfix) with ESMTP id C75D913C4B0 for ; Sun, 21 Oct 2007 17:34:46 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [209.31.154.41]) by cyrus.watson.org (Postfix) with ESMTP id 3391546EBA; Sat, 20 Oct 2007 20:55:57 -0400 (EDT) Date: Sun, 21 Oct 2007 01:55:56 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: Colin Percival In-Reply-To: <47065710.6090702@freebsd.org> Message-ID: <20071021015451.U70919@fledge.watson.org> References: <1191595847.2850.21.camel@amd.uni.vrs> <47065710.6090702@freebsd.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: Olli Hauer , freebsd-security@freebsd.org Subject: Re: missing Advisory at ftp.freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2007 17:34:47 -0000 On Fri, 5 Oct 2007, Colin Percival wrote: > Olli Hauer wrote: >> I am missing the advisory for openssl at ftp://ftp.freebsd.org/CERT/ > > We stopped uploading advisories there because we kept on running into > problems with ftp mirrors being out of date, while have complete control > over the security.freebsd.org webserver and can make sure files are there > before we send out the advisory. Sounds like we should remove this from ftp-master so it stops being replicated, or at least put a note there about it being historic. Any preference on which? It would be easy for me to put a warning and redirection at the top of README or rename CERT to CERT.old. Robert N M Watson Computer Laboratory University of Cambridge