From owner-freebsd-questions@FreeBSD.ORG Tue Apr 11 21:41:43 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C52C016A410 for ; Tue, 11 Apr 2006 21:41:43 +0000 (UTC) (envelope-from tedm@toybox.placo.com) Received: from mail.freebsd-corp-net-guide.com (mail.web-strider.com [65.75.192.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3741B43D45 for ; Tue, 11 Apr 2006 21:41:43 +0000 (GMT) (envelope-from tedm@toybox.placo.com) Received: from tedwin2k (nat-rtr.freebsd-corp-net-guide.com [65.75.197.130]) by mail.freebsd-corp-net-guide.com (8.11.1/8.11.1) with SMTP id k3BLfXu62400; Tue, 11 Apr 2006 14:41:35 -0700 (PDT) (envelope-from tedm@toybox.placo.com) From: "Ted Mittelstaedt" To: "Alex Zbyslaw" , Date: Tue, 11 Apr 2006 14:41:33 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 In-Reply-To: <443BAE40.9050704@dial.pipex.com> Importance: Normal Cc: Subject: RE: upcoming release 6.1: old version of some core components X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Apr 2006 21:41:43 -0000 Alex, you would lose that bet, zlib 1.2.2 has a hole in it, it should have been replaced with 1.2.3 See the zlib website for more info. Nospam, good catch, if none of the hip-shooters here file a PR I'll get around to it the next time I get a running build off the cvs. Ted >-----Original Message----- >From: owner-freebsd-questions@freebsd.org >[mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Alex Zbyslaw >Sent: Tuesday, April 11, 2006 6:25 AM >To: freebsd-questions@freebsd.org >Subject: Re: upcoming release 6.1: old version of some core components > > >No@SPAM@mgEDV.net wrote: > >>during testing the 6.1-BETA4 i found only one major thing >>i really like to discuss on the list for my understanding. >> >>why are some major parts of the os are not updated to the >>current versions (see examples beyond)? code-improvements >>and security-/functionality-fixes come to my mind here. >> >>examples given: >>zlib (v1.2.2, 10/2004; current 1.2.3, 07/2005) >>openssl (v0.9.7e, 10/2004; current 0.9.7i, 10/2005) >>openssh (v4.2p1, 01/2005, current 4.3p2 02/2006) >> >>for openssh, the code-freeze of freebsd was before the >>release of 4.3, this makes sense, but what about the rest? >> >> >> >I can't answer you main question, but I would say that you can bet your >shirt on the fact that there will be no known security issues in the >older packages. > >At least for openssl and openssh you can get latest versions >through the >ports. Not an option for everything -- I see no zlib for example and I >don't believe there's a standard cvs port either. > >--Alex > > >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to >"freebsd-questions-unsubscribe@freebsd.org" > >-- >No virus found in this incoming message. >Checked by AVG Free Edition. >Version: 7.1.385 / Virus Database: 268.4.1/307 - Release Date: 4/10/2006 >