Re: ports security advisories..

2000-03-21 Thread Dominic Mitchell
On Mon, Mar 20, 2000 at 09:46:14PM -, Dave McKay wrote: Is it really necessary to post the ports security advisories? The exploitable programs are not part of the FreeBSD OS, they are third party software. I think the proper place for these is the Bugtraq mailing list on

Re: ports security advisories..

2000-03-20 Thread Marc Rassbach
Is it necessary to post ports security advisories? YES. Should they be on this list? You think not. And until a list exists for security on FreeBSD not related to core OS/packages, this is the best forum for it, as it relates to FreeBSD Security. On Mon, 20 Mar 2000, Dave McKay wrote: Is

Re: ports security advisories..

2000-03-20 Thread Peter Wemm
Dave McKay wrote: Is it really necessary to post the ports security advisories? The exploitable programs are not part of the FreeBSD OS, they are third party software. I think the proper place for these is the Bugtraq mailing list on securityfocus.com. Also to add to the arguments, most

RE: ports security advisories..

2000-03-20 Thread Casey Dinsmore
I think that it is a necessary thing to do, since these programs are offered in the ports collection, and this is -security after all. It was nice and convienant to have the advisories posted because I just happened to have completed installing lynx-ssl from the ports collection mere hours

Re: ports security advisories..

2000-03-20 Thread Warner Losh
-BEGIN PGP SIGNED MESSAGE- In message [EMAIL PROTECTED] Dave McKay writes: : Is it really necessary to post the ports security advisories? Yes. : The exploitable programs are not part of the FreeBSD OS, they : are third party software. I think the proper place for these : is the