From owner-freebsd-security@FreeBSD.ORG Fri Sep 26 20:35:27 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 49DF793A for ; Fri, 26 Sep 2014 20:35:27 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0DFAA1FB for ; Fri, 26 Sep 2014 20:35:27 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.9/8.14.9) with ESMTP id s8QKZQFk072103 for ; Fri, 26 Sep 2014 20:35:26 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.9/8.14.9/Submit) id s8QKZQPd072102 for freebsd-security@freebsd.org; Fri, 26 Sep 2014 20:35:26 GMT (envelope-from bdrewery) Received: (qmail 31882 invoked from network); 26 Sep 2014 15:35:25 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 26 Sep 2014 15:35:25 -0500 Message-ID: <5425CE01.5070506@FreeBSD.org> Date: Fri, 26 Sep 2014 15:35:13 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2 MIME-Version: 1.0 To: Paul Hoffman , freebsd-security@freebsd.org Subject: Re: pkg repositories out of alignment References: <00000148ab969845-5940abcc-bb88-4111-8f7f-8671b0d0300b-000000@us-west-2.amazonses.com> <54243F0F.6070904@FreeBSD.org> <54244982.8010002@FreeBSD.org> <20140925193555.GB28430@satori.lan> <20140926123803.GA30925@zxy.spb.ru> In-Reply-To: OpenPGP: id=6E4697CF; url=http://www.shatow.net/bryan/bryan2.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="V0XOvSAaaWOveX6XQjQGgIHLdNEwvNXkQ" X-Mailman-Approved-At: Fri, 26 Sep 2014 21:13:04 +0000 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Sep 2014 20:35:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --V0XOvSAaaWOveX6XQjQGgIHLdNEwvNXkQ Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 9/26/2014 10:25 AM, Paul Hoffman wrote: > Just a note that the pkg repo for 10 seems to be far advanced over that= for 9.3. That is, the bash fix appeared in the 10 repo yesterday (or ear= lier), but it still not in the 9.3 repo. Here's what I'm seeing on a 9.3 = box right now: Quarterly builds before Latest and 10 builds before 9 due to demand. Packages are not published at the same time. They are published as each set finishes. There was an unfortunate delay this week because of nss/bash panic. Now we're mostly waiting on this week's libreoffice to fully build for each s= et. We're not well prepared for security updates to packages yet. We have many technical challenges to work through still. --=20 Regards, Bryan Drewery --V0XOvSAaaWOveX6XQjQGgIHLdNEwvNXkQ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJUJc4BAAoJEDXXcbtuRpfPyCMH/AozB/4+rwb+VepT4lAKpCDT pNwo1DR3k2KIZXms6r1s4EpV31Hw/zl2saUZ7LY5T11dhMfsMD5i8ZnH0IDpFocY gidXxF2guaHvAjcV67uPJo7h2dKW6HqxTmCm3GWH3+Na/IWMBmUU8MUcmwmiy565 ujEfeytfThPjyi9ArRc4z9q8TRiby6QZajCtdMKpKnjWn//Nq/LGSf7hShe73FE7 mZPJJehk5IOx2uLTR9gH1+dLJlkOcE1OGLW1NAyAV6xlMuelmju9faRNmlya+Yp+ TQQCuW8ZARTRTnykKpqBMHEFpjZAlmuWpti0SJJOIFYdtbpsDaX6qjCRUfeViEU= =/lLE -----END PGP SIGNATURE----- --V0XOvSAaaWOveX6XQjQGgIHLdNEwvNXkQ--