From owner-freebsd-security@FreeBSD.ORG  Mon Mar 23 00:22:26 2009
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35])
	by hub.freebsd.org (Postfix) with ESMTP id 5A4E81065853
	for <freebsd-security@freebsd.org>;
	Mon, 23 Mar 2009 00:22:26 +0000 (UTC)
	(envelope-from cperciva@freebsd.org)
Received: from xps.daemonology.net (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx2.freebsd.org (Postfix) with SMTP id EF9D5152227
	for <freebsd-security@freebsd.org>;
	Mon, 23 Mar 2009 00:18:38 +0000 (UTC)
	(envelope-from cperciva@freebsd.org)
Received: (qmail 40913 invoked from network); 23 Mar 2009 00:18:38 -0000
Received: from unknown (HELO xps.daemonology.net) (127.0.0.1)
	by localhost with SMTP; 23 Mar 2009 00:18:38 -0000
Message-ID: <49C6D55D.1010309@freebsd.org>
Date: Sun, 22 Mar 2009 17:18:37 -0700
From: FreeBSD Security Officer <cperciva@freebsd.org>
Organization: FreeBSD Project
User-Agent: Thunderbird 2.0.0.17 (X11/20081002)
MIME-Version: 1.0
To: freebsd security <freebsd-security@freebsd.org>
X-Enigmail-Version: 0.95.6
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Security advisory scheduling
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: security-officer@freebsd.org
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2009 00:22:27 -0000

Just to head off any complaints:  Yes, a security advisory just went out, and
yes, I do know that Monday morning (for UTC and further east) / Sunday afternoon
(west of UTC) is not the most convenient time for you to be patching systems.

Unfortunately, this issue was announced publicly at CanSecWest -- unlike most
security issues, we didn't get any advance notice of this.  When issues have not
yet been publicly announced we try to aim to send out advisories on Wednesdays;
but in cases like this when an issue is already public we don't want to delay
any more than necessary.

-- 
Colin Percival
Security Officer, FreeBSD | freebsd.org | The power to serve
Founder / author, Tarsnap | tarsnap.com | Online backups for the truly paranoid