Re: Security Announcements & Incremental Patches
From: Kris Kennaway (kris@obsecurity.org)
Date: 04/23/01
- Next message: Victor Sudakov: "Q: Impact of globbing vulnerability in ftpd"
- Previous message: Kris Kennaway: "Re: Connection attempts"
- In reply to: Valentin Nechayev: "Re: Security Announcements & Incremental Patches"
- Next in thread: Karsten W. Rohrbach: "Re: Security Announcements & Incremental Patches"
- Reply: Karsten W. Rohrbach: "Re: Security Announcements & Incremental Patches"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 22 Apr 2001 19:43:29 -0700 From: Kris Kennaway <kris@obsecurity.org> To: netch@segfault.kiev.ua
On Sun, Apr 22, 2001 at 08:21:44PM +0300, Valentin Nechayev wrote:
> It is quite simple for any qualified FreeBSD admin, including FreeBSD
> FTP site team, to make patched binaries for all supported releases for
> any security advisory and put them for free download for such admins who
> has bad compiling skills; but it is not provided now, and anyone should
No, it's not simple. You have to make sure you include all
dependencies of the change, everything the change depends on
(e.g. libraries with changes that are required by the updated
utility), and you have to test it in a variety of environments to make
sure it works as expected. It's relatively simple to make a package
from random pieces, it's quite difficult to test it and make sure that
it works.
More to the point, it takes additional time, which is always the most
scarce resource in volunteer projects. Are you willing to help test
binary security packages by reinstalling your system to a clean
installation of 4.3-RELEASE, then applying and testing the package?
Having said this, the RELENG_4_3 release branch is a step towards
allowing us to do this (since it's a known, constant base which is
expected to have few changes and therefore easy to manage
dependencies); there's the possibility of generating binary packages
for users of -RELEASE versions of FreeBSD starting with 4.3 only.
Kris
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
- application/pgp-signature attachment: stored
- Next message: Victor Sudakov: "Q: Impact of globbing vulnerability in ftpd"
- Previous message: Kris Kennaway: "Re: Connection attempts"
- In reply to: Valentin Nechayev: "Re: Security Announcements & Incremental Patches"
- Next in thread: Karsten W. Rohrbach: "Re: Security Announcements & Incremental Patches"
- Reply: Karsten W. Rohrbach: "Re: Security Announcements & Incremental Patches"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
