From owner-freebsd-questions@freebsd.org Wed Mar 16 11:50:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6F7B1AD1596; Wed, 16 Mar 2016 11:50:05 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.net (24-240-198-187.static.stls.mo.charter.com [24.240.198.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 403191F0; Wed, 16 Mar 2016 11:50:04 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.local (localhost [10.9.5.2]) by webmail.dweimer.net (8.15.2/8.15.2) with ESMTPS id u2GBNS1c010055 (version=TLSv1.2 cipher=DHE-RSA-CHACHA20-POLY1305 bits=256 verify=NO); Wed, 16 Mar 2016 06:23:28 -0500 (CDT) (envelope-from dweimer@dweimer.net) Received: (from www@localhost) by webmail.dweimer.local (8.15.2/8.15.2/Submit) id u2GBNSpo010053; Wed, 16 Mar 2016 06:23:28 -0500 (CDT) (envelope-from dweimer@dweimer.net) X-Authentication-Warning: webmail.dweimer.local: www set sender to dweimer@dweimer.net using -f To: Doug Hardie Subject: Re: Upcoming Releases MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 16 Mar 2016 06:23:28 -0500 From: dweimer Cc: Warren Block , Polytropon , FreeBSD Questions , owner-freebsd-questions@freebsd.org Organization: dweimer.net Reply-To: dweimer@dweimer.net Mail-Reply-To: dweimer@dweimer.net In-Reply-To: References: <20160305181742.9c3abe96.freebsd@edvax.de> Message-ID: <91216ae32782a50986763e7bc1c3a339@dweimer.net> X-Sender: dweimer@dweimer.net User-Agent: Roundcube Webmail/1.2-beta X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Mar 2016 11:50:05 -0000 On 2016-03-16 12:20 am, Doug Hardie wrote: >> On 15 March 2016, at 21:11, Warren Block wrote: >> >> On Wed, 9 Mar 2016, Doug Hardie wrote: >> >>> I recently saw a comment in one of the maillists that 11.0 was likely >>> to have the new packetized base feature. That tells me that 11.0 is >>> most likely to be dicey to work with. I am reminded when the new pkg >>> system came out and the supporting servers were compromised. >> >> To the best of my knowledge, there was no relation between pkg and any >> compromises. > > There was a period where the regular pkg servers were not available > because they had to be rebuilt. I don't recall the dates. It was not > pkg_ng, but the first major revision to pkg after that. > It wasn't because of the pkg / pkg_ng update though, if memory servers me correct a committer's username/password was comprised. It was just a coincidence that it happened around the same time update, but wasn't related to it. -- Thanks, Dean E. Weimer http://www.dweimer.net/