From owner-freebsd-security@FreeBSD.ORG  Sun Oct 21 20:48:18 2007
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 99D8516A418;
	Sun, 21 Oct 2007 20:48:18 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42])
	by mx1.freebsd.org (Postfix) with ESMTP id 45B4813C49D;
	Sun, 21 Oct 2007 20:48:18 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from fledge.watson.org (fledge.watson.org [209.31.154.41])
	by cyrus.watson.org (Postfix) with ESMTP id 5043046E02;
	Sun, 21 Oct 2007 16:48:05 -0400 (EDT)
Date: Sun, 21 Oct 2007 21:48:05 +0100 (BST)
From: Robert Watson <rwatson@FreeBSD.org>
X-X-Sender: robert@fledge.watson.org
To: Colin Percival <cperciva@freebsd.org>
In-Reply-To: <471AA8EE.7050406@freebsd.org>
Message-ID: <20071021214717.L70919@fledge.watson.org>
References: <1191595847.2850.21.camel@amd.uni.vrs>
	<47065710.6090702@freebsd.org>
	<20071021015451.U70919@fledge.watson.org>
	<471AA8EE.7050406@freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-security@FreeBSD.org
Subject: Re: missing Advisory at ftp.freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 21 Oct 2007 20:48:18 -0000

On Sat, 20 Oct 2007, Colin Percival wrote:

> Robert Watson wrote:
>> On Fri, 5 Oct 2007, Colin Percival wrote:
>>>> ftp://ftp.freebsd.org/CERT/
>>>
>>> We stopped uploading advisories there because we kept on running into 
>>> problems with ftp mirrors being out of date, while have complete control 
>>> over the security.freebsd.org webserver and can make sure files are there 
>>> before we send out the advisory.
>>
>> Sounds like we should remove this from ftp-master so it stops being 
>> replicated, or at least put a note there about it being historic.  Any 
>> preference on which?  It would be easy for me to put a warning and 
>> redirection at the top of README or rename CERT to CERT.old.
>
> All of the old advisories point to ftp.freebsd.org (both as "the latest 
> revision of this advisory can be found at" and for the patches), so we 
> should leave the existing files there for the near future at least.  Adding 
> a README pointing people towards security.freebsd.org sounds like the best 
> option to me.

What I've done is update the README and index.html to reflect the new 
location, but left the existing files in place for historical reasons.

Thanks,

Robert N M Watson
Computer Laboratory
University of Cambridge