Date: Tue, 1 Apr 2003 11:20:46 -0800 From: "Bruce A. Mah" <bmah@freebsd.org> To: Colin Percival <colin.percival@wadham.ox.ac.uk> Cc: freebsd-stable@freebsd.org Subject: Re: 4.8-RELEASE vs SA-03:07 Message-ID: <20030401192046.GA17224@intruder.bmah.org> In-Reply-To: <5.0.2.1.1.20030401123320.01dfc008@popserver.sfu.ca> References: <20030401141454.N43325-100000@atlantis.atlantis.dp.ua> <5.0.2.1.1.20030401123320.01dfc008@popserver.sfu.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
--tThc/1wpZn/ma/RB Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable If memory serves me right, Colin Percival wrote: > At 14:30 01/04/2003 +0300, Dmitry Pryanishnikov wrote: > > I see 4.8-RELEASE is already available on ftp://ftp.freebsd.org, but > >release notes don't mention status of Security Advisory 03:07 > >(last buffer overflow in sendmail). IMHO this should be fixed ASAP > >(I believe bug itself has been fixed in -RELEASE, isn't it?). >=20 > Yes, the bug was fixed; the release notes are out of date. To make a long story short, the release notes were already finalized and you'll see the sendmail update mentioned in the post-release errata. As has been pointed out by at least one other person, 4.8-RELEASE isn't officially available until a PGP-signed announcement from a member of the release engineering team gets sent to the freebsd-announce@ mailing list. Bruce. --tThc/1wpZn/ma/RB Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+ieaN2MoxcVugUsMRAtTrAJ9eDBeAEm7ClNQ3pEC4lv5eAGzOyACePDjC xFfivUCRGBpQdkI9qgN0kk4= =JEoe -----END PGP SIGNATURE----- --tThc/1wpZn/ma/RB--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030401192046.GA17224>