From owner-freebsd-stable@FreeBSD.ORG  Mon Nov 15 03:06:10 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3BFD716A4CE; Mon, 15 Nov 2004 03:06:10 +0000 (GMT)
Received: from mail.dt.e-technik.uni-dortmund.de
	(krusty.dt.e-technik.Uni-Dortmund.DE [129.217.163.1])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 9A0B743D45; Mon, 15 Nov 2004 03:06:09 +0000 (GMT)
	(envelope-from ma@dt.e-technik.uni-dortmund.de)
Received: from localhost (localhost [127.0.0.1])E339847E9B;
	Mon, 15 Nov 2004 04:06:08 +0100 (CET)
Received: from mail.dt.e-technik.uni-dortmund.de ([127.0.0.1])
 by localhost (krusty [127.0.0.1]) (amavisd-new, port 10024) with LMTP
 id 31774-06; Mon, 15 Nov 2004 04:06:08 +0100 (CET)
Received: from m2a2.dyndns.org (p54854C9B.dip.t-dialin.net [84.133.76.155])
	9581D47E8E;	Mon, 15 Nov 2004 04:06:08 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by merlin.emma.line.org (Postfix) with ESMTP id E2F77D7B1D;
	Mon, 15 Nov 2004 04:06:07 +0100 (CET)
Received: from merlin.emma.line.org ([127.0.0.1])
 by localhost (m2a2.dyndns.org [127.0.0.1]) (amavisd-new, port 10024)
 with LMTP id 00415-03-3; Mon, 15 Nov 2004 04:06:07 +0100 (CET)
Received: by merlin.emma.line.org (Postfix, from userid 500)
	id 3BE48D7970; Mon, 15 Nov 2004 04:06:07 +0100 (CET)
To: Kris Kennaway <kris@obsecurity.org>
In-Reply-To: <20041115005016.GA4384@xor.obsecurity.org> (Kris Kennaway's
	message of "Sun, 14 Nov 2004 16:50:16 -0800")
References: <20041115005016.GA4384@xor.obsecurity.org>
From: Matthias Andree <ma@dt.e-technik.uni-dortmund.de>
Date: Mon, 15 Nov 2004 04:06:07 +0100
Message-ID: <m3d5yfvmjk.fsf@merlin.emma.line.org>
User-Agent: Gnus/5.110003 (No Gnus v0.3) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Virus-Scanned: by amavisd-new at dt.e-technik.uni-dortmund.de
cc: ports@freebsd.org
cc: stable@freebsd.org
Subject: Re: New 5.x packages uploaded
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Nov 2004 03:06:10 -0000

Kris Kennaway <kris@obsecurity.org> writes:

> I've uploaded new packages for 5.3-stable; they'll make their way onto
> the ftp mirrors over the next day or so.  Included are the new
> versions of GNOME and KDE, among others.

BTW, are we getting long-standing security issues in ports fixed, for
instance cups-base, open-motif, others? Yeah I know send patches, but my
ressources are limited and committers are also overworked already...

The general question I'd like to raise is how long will we allow ports
with known security flaws linger around before they are marked BROKEN?

-- 
Matthias Andree