From owner-freebsd-stable@FreeBSD.ORG Fri Dec 23 21:45:07 2011 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B2EED106564A for ; Fri, 23 Dec 2011 21:45:07 +0000 (UTC) (envelope-from lattera@gmail.com) Received: from mail-tul01m020-f182.google.com (mail-tul01m020-f182.google.com [209.85.214.182]) by mx1.freebsd.org (Postfix) with ESMTP id 711D88FC15 for ; Fri, 23 Dec 2011 21:45:07 +0000 (UTC) Received: by obbwd18 with SMTP id wd18so8219052obb.13 for ; Fri, 23 Dec 2011 13:45:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=8h6dpKWdqO5s8D4S921bLQiBXEBdYzjvV3Rc4bJqT60=; b=edI/TG9pFWD6yYovQ47EJYV8e7pQzvFpk9bVuNCRT3lkvGGLIXqbb0uG2/otdvXZAR 3zagy+Z99pDO3teuko+YJ/OyiE1vrh456EMNA1Oi1IPVHMqIGHD+Dqg4PVCnMJEj9z2o P00TtcQtEJdRrLwfkBc/7S+/IGw/i/U4vc/sU= MIME-Version: 1.0 Received: by 10.182.227.7 with SMTP id rw7mr14154799obc.70.1324676706700; Fri, 23 Dec 2011 13:45:06 -0800 (PST) Received: by 10.182.56.134 with HTTP; Fri, 23 Dec 2011 13:45:06 -0800 (PST) In-Reply-To: References: <4EF4A75C.2040609@my.gd> <4EF4B2D6.5090206@sentex.net> <4EF4B982.3070207@missouri.edu> <4EF4C08A.3080609@sentex.net> <4EF4CB2E.4030109@infracaninophile.co.uk> <20111223204838.GA43740@in-addr.com> Date: Fri, 23 Dec 2011 14:45:06 -0700 Message-ID: From: Shawn Webb To: George Kontostanos Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: FreeBSD Stable Subject: Re: FLAME - security advisories on the 23rd ? uncool idea is uncool X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Dec 2011 21:45:07 -0000 As others have mentioned, you don't _have_ to patch this weekend. All of the vulnerabilities have been [semi-]public knowledge for at least a week. What's the harm in waiting till next week? Just pretend like the patches came in on Tuesday. I, for one, am grateful that FreeBSD has provided patches. It allows people who do have the time/ability to patch this weekend to do just that. If you don't want to, then don't. Simple as that. Thanks, Shawn On Fri, Dec 23, 2011 at 2:40 PM, George Kontostanos wrote: > On Fri, Dec 23, 2011 at 10:48 PM, Gary Palmer wrote= : >> On Fri, Dec 23, 2011 at 08:55:35PM +0200, George Kontostanos wrote: >>> On Fri, Dec 23, 2011 at 8:40 PM, Matthew Seaman >>> wrote: >>> > On 23/12/2011 18:05, George Kontostanos wrote: >>> >> Are all cvs mirror servers updated regarding these changes ? >>> >> >>> >> ANYBODY ???? >>> > >>> > Should have by now. ?Commits usually take about an hour to propagate = to >>> > the official cvsup servers. >>> > >>> > Easy enough to tell though -- the advisories have all the version >>> > numbers in, and you'ld only need to check a file or two from each of >>> > them to be reasonably sure you'ld got all the updates. >>> > >>> > ? ? ? ?Cheers, >>> > >>> > ? ? ? ?Matthew >>> > >>> > -- >>> > Dr Matthew J Seaman MA, D.Phil. ? ? ? ? ? ? ? ? ? 7 Priory Courtyard >>> > ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?Flat 3 >>> > PGP: http://www.infracaninophile.co.uk/pgpkey ? ? Ramsgate >>> > JID: matthew@infracaninophile.co.uk ? ? ? ? ? ? ? Kent, CT11 9PW >>> > >>> >>> Thanks for the info Matthew. I think though that it is best for all to >>> first make sure that the servers all updated before sending out all >>> those security advisories. >> >> I don't believe they're monitored like that. =A0If you want the updates >> quickly, download the files referenced in the advisories. =A0My build wa= s >> done before my local cvsup server picked up the changes. >> >> Gary > > Yes, that's easy if you dealing with one server. But it is very > different when you have to apply those patches to 20 different servers > that are in different locations. Having a local cvsup server doing > this job tends to make updating easier. > > In any case, and IMHO this was not the proper time for this kind of > advisories considering the fact that many companies are in a freeze > period. > > Cheers > > -- > George Kontostanos > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"