From owner-freebsd-announce Mon Nov 25 22:58:33 1996 Return-Path: owner-freebsd-announce Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id WAA15692 for freebsd-announce-outgoing; Mon, 25 Nov 1996 22:58:33 -0800 (PST) Received: from time.cdrom.com (time.cdrom.com [204.216.27.226]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id WAA15687 for ; Mon, 25 Nov 1996 22:58:29 -0800 (PST) Received: from time.cdrom.com (localhost [127.0.0.1]) by time.cdrom.com (8.8.3/8.6.9) with ESMTP id WAA11173 for ; Mon, 25 Nov 1996 22:58:42 -0800 (PST) To: announce@freebsd.org Subject: FreeBSD 2.1.6 replaced with point release (2.1.6.1) Date: Mon, 25 Nov 1996 22:58:42 -0800 Message-ID: <11168.848991522@time.cdrom.com> From: "Jordan K. Hubbard" Sender: owner-freebsd-announce@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Following Murphy's law to the letter, a significant security hole in sendmail 8.8.3 was found just one day after 2.1.6 was rolled and put up on ftp.freebsd.org, requiring some sort of response before putting 2.1.6 onto CDROM. While investigating this, it was also decided to integrate a fairly simple fix for the SYN attack problem (less sophisticated than the one in FreeBSD 2.2-ALPHA) which provided effective protection without introducing any potential instabilities which would violate 2.1.6's stability charter. Several other more minor changes were made to make(1) and the bsd.port.mk file in order to more effectively support the 2.2.x ports collection on 2.1.x machines, should people desire this, but that's about it for 2.1.6 -> 2.1.6.1 changes. In order to prevent the mirror sites from murdering us in our sleep for wasting space (not to mention Walnut Creek CDROM, who has already printed up the covers saying "2.1.6" on them), the 2.1.6.1 release was also simply overlayed on top of the 2.1.6 release on ftp.freebsd.org and will be released on CD as 2.1.6 - if it makes it easier to understand, just pretend that the 2.1.6 I announced before was really 2.1.6-BETA. :-) If you look at our timeline, we're still ahead of our December deadline for 2.1.6 in either case. Please read the RELNOTES.TXT file in the 2.1.6-RELEASE directory for more details on what you should upgrade if you're already running 2.1.6 and don't want to reinstall. The 2.1.6.1 README.TXT file also reads "RELEASE Version +1" at the top for easy identification, and the uname(1) command prints out 2.1.6.1 as well, so you'll know if you're running the security patched version on an installed system. Apologies in advance for any confusion this causes, but I believe we chose the lesser of several possible evils, and at least now 2.1.6 will be going out without any clearly obvious security holes. Thanks! Jordan From owner-freebsd-announce Thu Nov 28 00:27:33 1996 Return-Path: owner-freebsd-announce Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id AAA13381 for freebsd-announce-outgoing; Thu, 28 Nov 1996 00:27:33 -0800 (PST) Received: from time.cdrom.com (time.cdrom.com [204.216.27.226]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id AAA13370 for ; Thu, 28 Nov 1996 00:27:30 -0800 (PST) Received: from time.cdrom.com (localhost [127.0.0.1]) by time.cdrom.com (8.8.3/8.6.9) with ESMTP id AAA28836; Thu, 28 Nov 1996 00:27:30 -0800 (PST) Date: Thu, 28 Nov 1996 00:27:29 -0800 Message-ID: <28820.849169649.1@time.cdrom.com> From: "Jordan K. Hubbard" Subject: Re: IDE CDROM failure report.. [And SPEAK UP NOW, DAMN IT!] MIME-Version: 1.0 Content-Type: multipart/digest; boundary="----- =_aaaaaaaaaa" Content-Description: Blind Carbon Copy Sender: owner-freebsd-announce@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk To: undisclosed-recipients:; ------- =_aaaaaaaaaa Content-Type: message/rfc822 Content-Description: Original Message To: sos@freebsd.org cc: hackers@freebsd.org Subject: Re: IDE CDROM failure report.. [And SPEAK UP NOW, DAMN IT!] In-reply-to: Your message of "Thu, 28 Nov 1996 09:10:25 +0100." <199611280810.JAA03509@ravenock.cybercity.dk> Date: Thu, 28 Nov 1996 00:27:29 -0800 Message-ID: <28820.849169649@time.cdrom.com> From: "Jordan K. Hubbard" > > Apparently the NEC IDE 273 drive will mount, but gives read errors in > > actual use. Anyone with one of these drives, please talk to Soren! > > If you can also find one for sale in Denmark, Soren, please go ahead > > and buy it and send me the bill (or just buy it out of the check I'm > > about to send you). > > Check ! Are you sure thats the right type code for it, it doesn't show > up un my lists (but they are pretty old anyways..) I'm not positive, this is just what I was given by a Linux user who claimed he'd have happily stuck with FreeBSD if it had supported this drive. :-( If you can't find it at all, I wouldn't worry too much about it unless someone else can confirm it - users frequently haven't the slightest idea what kind of hardware they have ("Hey, nice car - what is it?" "Uh, I dunno." "Huh. 4 or 6 cylinder engine?" "Uh, I dunno. I've never looked under the hood, man, I just drive it." :-) Now with regard to that "SPEAK UP NOW, DAMN IT!" in the subject line... Folks, I must note that I have received approximately *two* reports of bogus IDE CDROM operation when I *know* that every release which rolls around has far more than 2 people complaining about this problem. Is this to be another classic case of everyone sitting around like clams during the interval when we actually have the time and resources to fix the problem, only jumping up and complaining about how horribly broken our IDE CDROM support is and gosh-won't-somebody-please-fix-it after the actual 2.2 release is out the door? Please, don't do this! The time to test out the 2.2-ALPHA boot floppy and see if it works with your IDE CDROM is *RIGHT NOW*, not in 6 months! It's getting to the point where if you come forward with an IDE CDROM drive problem at release time, I'm going to come after you with a flame thrower and a case of hand grenades, I'll be that frustrated by your complete failure to come forward when it would have actually done some good. I'm also bcc'ing this to the announce list and to the newsgroup, so nobody can say I didn't try to get the word out. Again: I've managed to obtain some minimal funding for Soren and others have also stepped forward with the generous offer of providing additional funds for fixing the IDE CDROM driver if only we can figure out *which drives are not working*. If you have an IDE CDROM drive which doesn't work with FreeBSD, please send mail to Soren Schmidt and indicate whether you'd be willing to donate the drive to him or can at least provide the drive model for his list of "rogues." We don't have enough funds to purchase every conceivable drive on the market, so drive donations are definitely appreciated, but even if you can't donate your drive then just telling us as much as you possibly can about its make and model number so that Soren can perhaps buy one would be MUCH appreciated. All of you who've griped about the sorry state of FreeBSD's IDE CDROM support in the past, this is your chance to actually do something about it. Don't blow this chance, please! It may be a long time before we can organize something like this again. Thank you! Jordan ------- =_aaaaaaaaaa--