Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Mar 2000 11:07:58 +0000
From:      Dom.Mitchell@palmerharvey.co.uk (Dominic Mitchell)
To:        Dave McKay <dave@mu.org>
Cc:        freebsd-security@freebsd.org, freebsd-hackers@freebsd.org
Subject:   Re: ports security advisories..
Message-ID:  <20000321110758.B913@voodoo.pandhm.co.uk>
In-Reply-To: <20000320154614.A63670@elvis.mu.org>; from dave@mu.org on Mon, Mar 20, 2000 at 09:46:14PM -0000
References:  <20000320154614.A63670@elvis.mu.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Mar 20, 2000 at 09:46:14PM -0000, Dave McKay wrote:
> Is it really necessary to post the ports security advisories?
> The exploitable programs are not part of the FreeBSD OS, they
> are third party software.  I think the proper place for these
> is the Bugtraq mailing list on securityfocus.com.  Also to add
> to the arguments, most of the advisories are not FreeBSD
> specific.

Just to add a point here, some of the problems noted in these advisories
*have* been FreeBSD specific, due to the way that a port has modified
the default install, or suchlike.  So it's definitely up to us to point
this out.
-- 
Dom Mitchell -- Palmer & Harvey McLane -- Unix Systems Administrator

	``Putting the doh! into dot-com.''


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000321110758.B913>