From owner-freebsd-security  Tue Jul  2 15:17:17 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D469637B401
	for <freebsd-security@FreeBSD.ORG>; Tue,  2 Jul 2002 15:17:14 -0700 (PDT)
Received: from lariat.org (lariat.org [63.229.157.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6F5954402F
	for <freebsd-security@FreeBSD.ORG>; Tue,  2 Jul 2002 15:10:03 -0700 (PDT)
	(envelope-from brett@lariat.org)
Received: from mustang.lariat.org (IDENT:ppp1000.lariat.org@lariat.org [63.229.157.2])
	by lariat.org (8.9.3/8.9.3) with ESMTP id QAA24529;
	Tue, 2 Jul 2002 16:06:17 -0600 (MDT)
X-message-flag: Warning! Use of Microsoft Outlook is dangerous and makes your system susceptible to Internet worms.
Message-Id: <4.3.2.7.2.20020702155758.00e9a2c0@localhost>
X-Sender: brett@localhost
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Tue, 02 Jul 2002 16:06:13 -0600
To: Wincent Colaiuta <wincentcolaiuta@mac.com>,
	freebsd-security@FreeBSD.ORG
From: Brett Glass <brett@lariat.org>
Subject: Re: security fixes
In-Reply-To: <592EA664-8DE0-11D6-A483-003065C60B4C@mac.com>
References: <009201c2213a$dd3a4b00$edec910c@fbccarthage.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

At 11:22 AM 7/2/2002, Wincent Colaiuta wrote:

>So on production systems track RELENG_4_6 now, and when that stops being updated, start tracking RELENG_4_7, and so on.... 

With the flurry of changes going on (including the OpenSSH hole and libc 
hole in the base install and the Apache vulnerability in the ports and 
packages), it'd be nice to see an interim release. Who here would be
in favor of that? Who, on the FreeBSD Core Team, might make the decision 
to do an interim release before 4.7 (scheduled for October)? (Yes, it
takes work to put out a release, but do we really want everyone who wants
a secure system to have to install from -STABLE snapshots, running the 
risk of picking a bad day, for four months?)

--Brett Glass


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message