From owner-freebsd-chat  Sat Oct  3 22:40:52 1998
Return-Path: <owner-freebsd-chat@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id WAA14370
          for freebsd-chat-outgoing; Sat, 3 Oct 1998 22:40:52 -0700 (PDT)
          (envelope-from owner-freebsd-chat@FreeBSD.ORG)
Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA14340
          for <freebsd-chat@freebsd.org>; Sat, 3 Oct 1998 22:40:36 -0700 (PDT)
          (envelope-from brett@lariat.org)
Received: (from brett@localhost)
	by lariat.lariat.org (8.8.8/8.8.6) id XAA21494;
	Sat, 3 Oct 1998 23:39:54 -0600 (MDT)
Message-Id: <4.1.19981003233749.040c07d0@mail.lariat.org>
X-Sender: brett@mail.lariat.org
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 
Date: Sat, 03 Oct 1998 23:39:25 -0600
To: CyberPsychotic <fygrave@freenet.bishkek.su>
From: Brett Glass <brett@lariat.org>
Subject: Re: Status Report on 2.2.6 Giveaway CD's 
Cc: Mike Smith <mike@smith.net.au>, Frank Pawlak <fpawlak@execpc.com>,
        Open Systems Networking <opsys@mail.webspan.net>,
        freebsd-chat@FreeBSD.ORG
In-Reply-To: <Pine.BSD.4.02.9810041045020.425-100000@freenet.kg>
References: <4.1.19981003105957.0420ea30@mail.lariat.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-chat@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 10:46 AM 10/4/98 +0500, CyberPsychotic wrote:
 
>> 
>> I was debating asking for some of the 2.2.6 giveaway CDs, but opted
>> not to do so. Why? Because that release had some security problems
>> that could actually sour some folks on FreeBSD. We were rooted as
>> a result of one of them.
>> 
>
>
> Well, when I installed 2.2.6, I upgraded to 2.2.7 right away over the
>network. 

That's the right thing to do! However, if you did that, you really didn't
have to install 2.2.6 first. You could have just started with the 2.2.7
floppy diskette, and it would have gone faster.

>What were those security issues anyway? I checked bugtraq, but
>didnt find much.. any other place, where I could have a look?

Bugtraq covered most of them. The freebsd-security list covered pretty
much all. CERT reported 4 as formal advisories.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message