Date: Wed, 15 May 2019 16:02:44 +0000 From: Glen Barber <gjb@freebsd.org> To: Kurt Jaeger <pi@freebsd.org> Cc: "Julian H. Stacey" <jhs@berklix.com>, stable@freebsd.org, re@freebsd.org, FreeBSD Security Officer <so@freebsd.org> Subject: Re: FreeBSD flood of 8 breakage announcements in 3 mins. Message-ID: <20190515160244.GU15455@FreeBSD.org> In-Reply-To: <20190515155838.GV20962@fc.opsec.eu> References: <20190515153836.GU20962@fc.opsec.eu> <201905151551.x4FFp0UP067236@fire.js.berklix.net> <20190515155838.GV20962@fc.opsec.eu>
next in thread | previous in thread | raw e-mail | index | archive | help
--3yk1sSvxP8cRAjBs Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, May 15, 2019 at 05:58:38PM +0200, Kurt Jaeger wrote: > Hi! >=20 > > > > Alternative is to for announcers to do Less work:=20 > > > > Send each announcement when ready. >=20 > > > The problem is not the announcement, the problem is providing > > > the freebsd-update. >=20 > > > If announcements are send when ready, and the freebsd-update is > > > not ready, therefore, the timeframes to attack systems with unpatched > > > problems are much longer. >=20 > > True as far as that goes for binary users, but often source patches > > are available faster, which begs the question: when to announce ? > > When there's diffs ? When diffs are commited to src/ (used to be the no= rm *) ? > > When there's some binary update ?=20 > > Whne a whole bunch of 8 arrive in 3 minutes ? Gasp ! >=20 > Now I understand why you bring this up. >=20 > I guess the majority of users are using the binary update path. >=20 > Maybe re@ can explain how the process is for these steps ? >=20 This is an so@ thing (CCd). re@ does not have any involvement in this process. Glen --3yk1sSvxP8cRAjBs Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEjRJAPC5sqwhs9k2jAxRYpUeP4pMFAlzcOCQACgkQAxRYpUeP 4pOCaw/+KmuAxkQgN/pBRqZEvq4B0K8OCToE2XBavpugNMUJwEmlG5sPYHEc2tg2 mIPmQVzM47x/SdwARXkqUoUGh+jvOcYoEzfK2rLXNR5nAz7zrA5fcBkGe/wNZ23t N4GsCYym54lwalFWWXzmsUfiUMlLvkhLPW6N97buDftNw5B0RQKNCymVWc2butM7 dBSWQKW0BgKq9vh+X+6T6z0u05nbO7prsM8nWu3DYPwRvgdzxxEmoui2C8cQvda/ 3F5aXi8HrYgQO4JzI0VYbqkCrXkt+r7ZYM4D/UO0u+LRv8vEglM/TRhWxxPLsbaD GCN8C6DFusGwVQB2Kg+81IreHclRkotQw4iosvZrr3ElkRW7Np8eRRWTedg/D5Ui Ne05aJlZzrU1AxUOhInvMrQg+o685CJx1Kz+dNaastuv4/Qnqz5kpb4oNgjvBKPY y0XJpsE6X/lFCkKhVcAbpy1Q5MdCesb4u2Zdv2gcnKtltIOIZPtbqXfV40aFmM85 2YkQAmt/bo0GCo2RNAowgxUx5kcxxLlqSir2+kWlv7xeOCnL4Ayw4FX9uyA/bwHa nBvUFk4Fos2edGgEvWt4ZLWc7nTbAb6312AphzpaShwUxPY56JUlD+aM1vMSHRqL hlhVHVbhB8ipqYh3Csg4f7P5xkseU16iJXR2A+uGosq7XCNnKEk= =FqGO -----END PGP SIGNATURE----- --3yk1sSvxP8cRAjBs--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190515160244.GU15455>