OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brett Glass (brettlariat.org)
Date: Thu Apr 18 2002 - 13:00:07 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    At 11:51 AM 4/18/2002, Nate Williams wrote:

    >Pray tell who is going to very that a snapshot is both 'known and good'?

    That's not "known and good" -- it's "known TO BE good."

    >Simply applying security patches doesn't (necessarily) qualify as giving
    >you your requirement,

    Not if the version being used has also been altered in other ways.

    >This ain't rocket science here....

    No, it's not. Other open source projects issue periodic "patch level N"
    snapshots between releases. If a significant security event occurs,
    FreeBSD should as well. Pick a snapshot after the fixes have gone in,
    test it, and post it as the next patch level... one that's a relatively
    safe bet for an admin to upgrade to. In other words, you should be
    able to go to the download site and actually find a build labeled
    FreeBSD 4.5-RELEASE-p3.

    --Brett

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-security" in the body of the message