From owner-freebsd-security@FreeBSD.ORG Sun Oct 5 07:46:19 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 613BA16A4B3 for ; Sun, 5 Oct 2003 07:46:19 -0700 (PDT) Received: from tx0.oucs.ox.ac.uk (tx0.oucs.ox.ac.uk [129.67.1.163]) by mx1.FreeBSD.org (Postfix) with ESMTP id DFAE54400F for ; Sun, 5 Oct 2003 07:46:17 -0700 (PDT) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from scan0.oucs.ox.ac.uk ([129.67.1.162] helo=localhost) by tx0.oucs.ox.ac.uk with esmtp (Exim 4.20) id 1A6A9I-0007dP-Ez for freebsd-security@freebsd.org; Sun, 05 Oct 2003 15:46:16 +0100 Received: from rx0.oucs.ox.ac.uk ([129.67.1.161]) by localhost (scan0.oucs.ox.ac.uk [129.67.1.162]) (amavisd-new, port 25) with ESMTP id 29221-03 for ; Sun, 5 Oct 2003 15:46:16 +0100 (BST) Received: from gateway.wadham.ox.ac.uk ([163.1.161.253]) by rx0.oucs.ox.ac.uk with smtp (Exim 4.20) id 1A6A9I-0007dL-1c for freebsd-security@freebsd.org; Sun, 05 Oct 2003 15:46:16 +0100 Received: (qmail 26645 invoked by uid 0); 5 Oct 2003 14:46:16 -0000 Received: from colin.percival@wadham.ox.ac.uk by gateway by uid 71 with qmail-scanner-1.16 (sweep: 2.14/3.71. spamassassin: 2.53. Clear:. Processed in 1.055187 secs); 05 Oct 2003 14:46:16 -0000 X-Qmail-Scanner-Mail-From: colin.percival@wadham.ox.ac.uk via gateway X-Qmail-Scanner: 1.16 (Clear:. Processed in 1.055187 secs) Received: from dhcp1131.wadham.ox.ac.uk (HELO piii600.wadham.ox.ac.uk) (163.1.161.131) by gateway.wadham.ox.ac.uk with SMTP; 5 Oct 2003 14:46:15 -0000 Message-Id: <5.0.2.1.1.20031005153911.0300a028@popserver.sfu.ca> X-Sender: cperciva@popserver.sfu.ca X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Sun, 05 Oct 2003 15:46:13 +0100 To: hawkeyd@visi.com, freebsd-security@freebsd.org From: Colin Percival In-Reply-To: <20031005143006.GB76750@sheol.localdomain> References: <20031002170844.GA66592@madman.celabo.org> <20031002170844.GA66592@madman.celabo.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Subject: Re: HEADS UP: upcoming security advisories X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Oct 2003 14:46:19 -0000 At 09:30 05/10/2003 -0500, D J Hawkey Jr wrote: >On Oct 02, at 12:08 PM, Jacques A. Vidrine wrote: > > FreeBSD-SA-03:15.openssh > > This is in final review and should be released today. Fixes > > for this issue entered the tree on September 24. I apologize > > for the delay in getting this one out. > >I see that no advisory or patch has been released yet, or has this been >rolled into SA-03:18? SA-03:15 deals with PAM issues, so it isn't part of SA-03:18; des commited fixes to RELENG_4_6, _4_7, _4_8, _4, _5_1, and HEAD on september 24th. I assume the advisory will come out soon -- with all these recent security issues coming up at once, it seems that fixing the bugs has taken priority over writing the associated advisories (with good reason). Colin Percival