From owner-freebsd-security Sat Apr 14 3:32: 0 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-21.dsl.lsan03.pacbell.net [63.207.60.21]) by hub.freebsd.org (Postfix) with ESMTP id A34F937B50D for ; Sat, 14 Apr 2001 03:31:53 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 7D1A366B84; Sat, 14 Apr 2001 03:31:49 -0700 (PDT) Date: Sat, 14 Apr 2001 03:31:49 -0700 From: Kris Kennaway To: Michael Nottebrock Cc: Michael Bryan , freebsd-security@freebsd.org Subject: Re: Security Announcements? Message-ID: <20010414033149.B24480@xor.obsecurity.org> References: <3AD33218.FE8D7ACD@ursine.com> <001d01c0c1fc$23d73680$0508a8c0@lofi.dyndns.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="l76fUT7nc3MelDdI" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <001d01c0c1fc$23d73680$0508a8c0@lofi.dyndns.org>; from michaelnottebrock@gmx.net on Tue, Apr 10, 2001 at 10:23:43PM +0200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --l76fUT7nc3MelDdI Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Apr 10, 2001 at 10:23:43PM +0200, Michael Nottebrock wrote: > FreeBSD: Absolutely nothing, not even an official statement or some > kind of notification anywhere on the website. The fix is apparently > done, but nobody (well, okay, at least my very dumb own self) seems to > know where to get it or how to apply it. Is this due to 4.3-Release > stress? It certainly is starting to irritate people running > 4.2-Release. >=20 > I really do not want to piss on anybody's legs here, but, there _are_ > quite a few sites running FreeBSD ftp-servers, aren't they? I've been away at a conference for the past two weeks. The fix was put in place in a very timely manner by other committers, and there has been discussion about the issue here and on other lists (it's also noted in the CERT advisory). I expect an advisory will go out in the near future once I have caught up on my 10000+ outstanding emails, etc. Kris FreeBSD Security Officer --l76fUT7nc3MelDdI Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE62CcVWry0BWjoQKURAsPfAKDQhL9FZP43qI9kKO7n0DqvM/dYngCfS8O2 KdO9rYOOOKwK6LvFNJLHDkg= =7NC4 -----END PGP SIGNATURE----- --l76fUT7nc3MelDdI-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message