From owner-freebsd-security@freebsd.org Fri Sep 18 00:03:57 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E689F3F1DCB for ; Fri, 18 Sep 2020 00:03:57 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-ej1-x641.google.com (mail-ej1-x641.google.com [IPv6:2a00:1450:4864:20::641]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4BsvFT0JDrz3bBR for ; Fri, 18 Sep 2020 00:03:56 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: by mail-ej1-x641.google.com with SMTP id e23so5693869eja.3 for ; Thu, 17 Sep 2020 17:03:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=Fx+qVkD3P1+9Q7Z6TSG2Iuku+cyR+9cYDbDqQVnLp8Q=; b=tdf/N86xjjP2djrRm0ycj4Eb1U/DF8183enx8suhxh9G8daADKcKEJvthQXL97uIB4 Lat8c+op6JU1RAeMcm6biY2LeIzft6EG8AmAW22Vyz9hR1Ur0JaBIW8/r5SNAiZQCwSy CXLd3o5U/9ufZBvwjxrCgOwDp1ZwCUOn6C9C5Ybp7p0ZgDK0KrPNDD0v0ELKM4g9BgJ0 Dj9xmMJMbpoQJAhm9tovj3CtNJ3/CqzzWYr/xy1UVYqs3qbbYUi1VVAJj2ie/2U5uHjo tawxzFzRymPWX5spVPH5R6sN8VoxMnCQSbEQq2ctfm2uIzTdDoQ7e4f3JA4+JwOf2HWN zv1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=Fx+qVkD3P1+9Q7Z6TSG2Iuku+cyR+9cYDbDqQVnLp8Q=; b=G2TVW2v911eHwznydf4edFITG7JzqqhXbqozdpHOEE473sgJequcJ6icezyUbcOWwE r602pWVPL4Ouek8PLVWEY2m76P91f58KgbV3RSnZ3G7JZXFzt40tSYxJaUe3/KzKHQym 7k1SZfdVgQha2Kkpu6xdk2vN0A2u0PlEQtl/gDc4OTLMZ8PORFbbSVV9FoCey1zTov7G Nfwjc/C8Bqboz6KczRwRvjuFIBl5wttCUc8o3fQ4pDL9HoQYxoJBd6OsEmv2r+KFDjHm K/KhCy9lSrEYL1nsE05qXoE1OhHu81Ox/LP0R8ymepzJr3avH+kRQ1z6rkVQGJZT6UE+ YF1Q== X-Gm-Message-State: AOAM533dsP/3hBxokShPcS+hEAPg7LaxwzPoC9ReNlfplsi3f0/vs7N5 QBGfJ6Yl47YDv2dFdme/358n/h/pYUBehaEd6lelVGdbnRxTnA== X-Google-Smtp-Source: ABdhPJzKtGG5CK24pb9u2nsonvHOONtRtoOgGh9nyTGH2lOfCY+IQiGSaPA1XN/bVXeixLZRkIT1T4QMdOGc13DhBRQ= X-Received: by 2002:a17:906:c1c3:: with SMTP id bw3mr32747627ejb.516.1600387435292; Thu, 17 Sep 2020 17:03:55 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:ab4:9f4a:0:0:0:0:0 with HTTP; Thu, 17 Sep 2020 17:03:54 -0700 (PDT) In-Reply-To: <20200917204102.GG26726@FreeBSD.org> References: <20200917204102.GG26726@FreeBSD.org> From: grarpamp Date: Thu, 17 Sep 2020 20:03:54 -0400 Message-ID: Subject: Re: 12.2R Sigs To: freebsd-security@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 4BsvFT0JDrz3bBR X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=tdf/N86x; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of grarpamp@gmail.com designates 2a00:1450:4864:20::641 as permitted sender) smtp.mailfrom=grarpamp@gmail.com X-Spamd-Result: default: False [-2.21 / 15.00]; RCVD_TLS_ALL(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; NEURAL_HAM_MEDIUM(-0.97)[-0.973]; FROM_HAS_DN(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.02)[-1.015]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::641:from]; NEURAL_SPAM_SHORT(0.78)[0.779]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-security]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim] X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Sep 2020 00:03:58 -0000 > They will be added with the first RC build Yes RC* seems the latest point in timeline to begin excercise them. > a bug in the order of operations > And there is the PGP-signed email to stable@ that contains > them. Future noting that lists do not support foreknown path schemes for that data. Whereas repo, website and dataset locations are more predictable and programmatic... allowing fetching, validation, etc. There could be a commit subsequent to tags, to hold all relavant collected metadata results, created sigs, etc of those tagged builds.