From owner-cvs-ports@FreeBSD.ORG  Wed Jun 27 19:35:53 2012
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 089C1106566C;
	Wed, 27 Jun 2012 19:35:53 +0000 (UTC)
	(envelope-from wxs@atarininja.org)
Received: from syn.atarininja.org (syn.csh.rit.edu [129.21.49.45])
	by mx1.freebsd.org (Postfix) with ESMTP id 8A1848FC16;
	Wed, 27 Jun 2012 19:35:51 +0000 (UTC)
Received: by syn.atarininja.org (Postfix, from userid 1001)
	id 3E12C5C34; Wed, 27 Jun 2012 15:35:51 -0400 (EDT)
Date: Wed, 27 Jun 2012 15:35:51 -0400
From: Wesley Shields <wxs@FreeBSD.org>
To: Ryan Steinmetz <zi@FreeBSD.org>
Message-ID: <20120627193551.GB89288@atarininja.org>
References: <201206271534.q5RFYiqv033640@repoman.freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <201206271534.q5RFYiqv033640@repoman.freebsd.org>
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org
Subject: Re: cvs commit: ports/security/vuxml vuln.xml
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jun 2012 19:35:53 -0000

On Wed, Jun 27, 2012 at 03:34:44PM +0000, Ryan Steinmetz wrote:
> zi          2012-06-27 15:34:44 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     security/vuxml       vuln.xml 
>   Log:
>   - Document recent FreeBSD SA's for 2012: SA-12:04.sysret,
>   SA-12:03.bind, SA-12:02.crypt, SA-12:01.openssl
>   
>   Reviewed by:    wxs

Thanks! I had been meaning to do this but keep running out of time to do
it.

It would be nice if these were prepared by someone(TM) and committed
along with the fixes. Getting these out to portaudit users is a useful
thing to do. I don't want to add on to secteam's work but I do want to
at least bring it up as something we should formalize for SAs.

Before anyone asks: yes, if I knew about SAs going out ahead of time I
would make sure I prepare the updates to go in time. It's just so
annoying to do after-the-fact that I kept putting it off.

-- WXS