From owner-freebsd-security Wed Oct 4 7:48:47 2000 Delivered-To: freebsd-security@freebsd.org Received: from puck.firepipe.net (mcut-b-167.resnet.purdue.edu [128.211.209.167]) by hub.freebsd.org (Postfix) with ESMTP id D363A37B503; Wed, 4 Oct 2000 07:48:38 -0700 (PDT) Received: by puck.firepipe.net (Postfix, from userid 1000) id 7B4251955; Wed, 4 Oct 2000 09:48:58 -0500 (EST) Date: Wed, 4 Oct 2000 09:48:58 -0500 From: Will Andrews To: Alfred Perlstein Cc: Nate Williams , Kris Kennaway , Jordan Hubbard , Paul Richards , Christopher Masto , Warner Losh , Joseph Scott , Brian Somers , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, freebsd-security@FreeBSD.org Subject: Re: How long for -stable [ Re: cvs commit: src/usr.bin/finger finger.c ] Message-ID: <20001004094858.I26605@puck.firepipe.net> Reply-To: Will Andrews Mail-Followup-To: Will Andrews , Alfred Perlstein , Nate Williams , Kris Kennaway , Jordan Hubbard , Paul Richards , Christopher Masto , Warner Losh , Joseph Scott , Brian Somers , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, freebsd-security@FreeBSD.org References: <85378.970625261@winston.osd.bsdi.com> <20001003192158.A14805@freefall.freebsd.org> <200010040349.VAA27923@nomad.yogotech.com> <20001004000827.B27736@fw.wintelcom.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20001004000827.B27736@fw.wintelcom.net>; from bright@wintelcom.net on Wed, Oct 04, 2000 at 12:08:27AM -0700 X-Operating-System: FreeBSD 4.1-STABLE i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, Oct 04, 2000 at 12:08:27AM -0700, Alfred Perlstein wrote: > > However, I didn't bother making the fix available because I felt it > > might give people the wrong impression. Just because *I* am willing to > > support a really old release such as FreeBSD 2, I still feel the users > > should be 'encouraged' to use newer releases. By not making those fixes > > available (which were in fact rather trivial to do), those folks who > > aren't capable of fixing the bugs will be more likely to upgrade their > > systems to a newer 'more supported' release. > > > > I think supporting older releases *really* needs to be done by a > > commercial entity (or at least folks who have a commercial stake in > > seeing it done), since the majority of developers are in it for the > > development fun, and product support is all but fun. :( > > I think it's a bit selfish of you to keep these fixes to yourself, > and it's the wrong attitude to have especially if you're confident > about a fix, there's always people stuck with ancient releases in > production and could use the help. I agree with Alfred, and think that this sort of "social engineering" is not acceptable in a project like this. -- Will Andrews - Physics Computer Network wench The Universal Answer to All Problems - "It has something to do with physics." -- Comic on door of Room 240, Physics Building, Purdue University To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message