From owner-freebsd-security Tue Apr 10 13:50:29 2001 Delivered-To: freebsd-security@freebsd.org Received: from scientia.demon.co.uk (scientia.demon.co.uk [212.228.14.13]) by hub.freebsd.org (Postfix) with ESMTP id 75EAA37B422 for ; Tue, 10 Apr 2001 13:50:23 -0700 (PDT) (envelope-from ben@scientia.demon.co.uk) Received: from strontium.scientia.demon.co.uk ([fec0::2e0:7dff:fe81:749d]) by scientia.demon.co.uk with esmtp (Exim 3.22 #1) id 14n55b-0007xW-00; Tue, 10 Apr 2001 21:50:15 +0100 Received: (from ben@localhost) by strontium.scientia.demon.co.uk (8.11.3/8.11.3) id f3AKoEr71958; Tue, 10 Apr 2001 21:50:14 +0100 (BST) (envelope-from ben) Date: Tue, 10 Apr 2001 21:50:14 +0100 From: Ben Smithurst To: Michael Nottebrock Cc: Michael Bryan , freebsd-security@freebsd.org Subject: Re: Security Announcements? Message-ID: <20010410215014.A8173@scientia.demon.co.uk> References: <3AD33218.FE8D7ACD@ursine.com> <001d01c0c1fc$23d73680$0508a8c0@lofi.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <001d01c0c1fc$23d73680$0508a8c0@lofi.dyndns.org> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Michael Nottebrock wrote: > I agree that there is need for improvement. Let's just see what the > other OS's security people are doing about the recent ftpd-issue: > > NetBSD: > ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000 > -018.txt.asc > OpenBSD: > ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/025_glob.patch > FreeBSD: Absolutely nothing I'm pretty sure that's complete and utter bollocks, unless I'm misunderstanding the issue, or thinking of another ftpd-issue. Go visit and see for yourself. As far as I can see this issue has been fixed in -current, 4-stable, *AND* 3-stable. > It certainly is starting to irritate people running > 4.2-Release. Well if you want the latest security fixes you shouldn't be running a -release anyway, that's that the -stable branch is for. -- Ben Smithurst / ben@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message