From owner-freebsd-ports@FreeBSD.ORG  Wed Mar 22 23:36:27 2006
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
X-Original-To: freebsd-ports@FreeBSD.org
Delivered-To: freebsd-ports@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2886D16A400
	for <freebsd-ports@FreeBSD.org>; Wed, 22 Mar 2006 23:36:27 +0000 (UTC)
	(envelope-from kris@obsecurity.org)
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9FABE43D45
	for <freebsd-ports@FreeBSD.org>; Wed, 22 Mar 2006 23:36:26 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: from obsecurity.dyndns.org (elvis.mu.org [192.203.228.196])
	by elvis.mu.org (Postfix) with ESMTP id 82E3B1A4E5D;
	Wed, 22 Mar 2006 15:36:26 -0800 (PST)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 7E9745148E; Wed, 22 Mar 2006 18:36:25 -0500 (EST)
Date: Wed, 22 Mar 2006 18:36:24 -0500
From: Kris Kennaway <kris@obsecurity.org>
To: "Jeremy C. Reed" <reed@reedmedia.net>
Message-ID: <20060322233624.GA33221@xor.obsecurity.org>
References: <Pine.NEB.4.62.0603221313380.10693@pilchuck.reedmedia.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="5vNYLRcllDrimb99"
Content-Disposition: inline
In-Reply-To: <Pine.NEB.4.62.0603221313380.10693@pilchuck.reedmedia.net>
User-Agent: Mutt/1.4.2.1i
Cc: freebsd-ports@FreeBSD.org
Subject: Re: updated packages for security issues on FTP server?
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Mar 2006 23:36:27 -0000


--5vNYLRcllDrimb99
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Mar 22, 2006 at 01:17:59PM -0800, Jeremy C. Reed wrote:
> What is the policy or procedure for FreeBSD ports team (or maintainers) t=
o=20
> provide updated packages (prebuilt .tbz) for security issues for the FTP=
=20
> servers?
>=20
> If this is documented, please point me to it.
>=20
> I have seen past security advisories for "ports" that have pointed to=20
> prebuilt packages on the FTP server.
>=20
> But looking today at=20
> ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/ I don't=
=20
> see any new packages within a month (although ports tree has been updated=
=20
> for security issues).
>=20
> Where would packages for security fixes be uploaded to?

That directory, when we're not in a release cycle and using up 100% of
our build resources for that purpose.

Kris

--5vNYLRcllDrimb99
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (FreeBSD)

iD8DBQFEId94Wry0BWjoQKURAt9HAKClxWZzeBy0+66p3oeynx7+IYzpRQCePU5+
rn9SvffZ1BpDKICbilCqd4A=
=i1Rb
-----END PGP SIGNATURE-----

--5vNYLRcllDrimb99--