OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Things Sneaking into OPENBSD_3_5 branch?

From: Brad (bradcomstyle.com)
Date: Mon May 03 2004 - 14:51:09 CDT


From www.openbsd.org/stable.html...

Errata entries are made for bugs which affect many people. Other
patches may be merged into the patch branch if they affect a few
people in drastic ways.

On Mon, May 03, 2004 at 03:39:19PM -0400, Edwin Brown wrote:
> In the past (throughout the OPENBSD_3_4 branch) I've noticed that any
> update the the STABLE branch is
> usuallly accompanied by a security announcement. I've been updating my
> development boxes from cvsup
> using the following file.
>
> -BEGIN SUPFILE-
>
> *default host=zeus
> #zeus is a local box that is updated every 2 hours and contains the
> entire OpenBSD repository
> *default base=/usr/local/etc/cvsup
> *default prefix=/usr
> *default release=cvs tag=OPENBSD_3_5
> *default delete use-rel-suffix
>
> *default compress
>
> #OpenBSD-all
> OpenBSD-src
> OpenBSD-xf4
> #OpenBSD-ports
> #OpenBSD-www
> #OpenBSD-x11
>
> -END SUPFILE-
>
> -BEGIN UPDATE-
> Parsing supfile "obsd35.supfile"
> Connecting to zeus
> Connected to zeus
> Server software version: SNAP_16_1g
> Negotiating file attribute support
> Exchanging collection information
> Establishing multiplexed-mode data connection
> Running
> Updating collection OpenBSD-src/cvs
> Checkout src/gnu/usr.bin/cvs/doc/cvs.aux
> Checkout src/gnu/usr.bin/cvs/doc/cvs.info-4
> Checkout src/gnu/usr.bin/cvs/doc/cvs.info-5
> Checkout src/gnu/usr.bin/cvs/doc/cvs.info-7
> Checkout src/gnu/usr.bin/cvs/doc/cvs.ps
> Edit src/gnu/usr.bin/cvs/src/client.c
> Add delta 1.10.8.1 2004.05.01.00.19.41 brad
> Edit src/gnu/usr.bin/cvs/src/modules.c
> Add delta 1.2.2.1 2004.05.01.00.19.41 brad
> Delete src/gnu/usr.bin/gcc/INSTALL
> Cannot delete "/u/ebrown/obsd/src/gnu/usr.bin/gcc/INSTALL": Directory
> not empty /* not a problem */
> Edit src/lib/libpthread/uthread/uthread_kern.c
> Add delta 1.27.4.1 2004.05.03.01.16.27 brad
> -END UPDATE-
>
> I've gotten both a cvs cupdate and a libpthread update. I was wondering.
> Will there be advisories for these? Granted they
> were minor updates. Just to make sure I pulled the src from a primary
> ftp site and ran cvsup against it. Indeed, according to cvsup, it needed
> these two updates. I'm just surprised to see STABLE getting updated
> without any kind of announcement.
> Is this normal?
>
> Thanks
>
> Edwin