RE: upcoming release 6.1: old version of some core components

2006-04-12 Thread Ted Mittelstaedt
>-Original Message- >From: Kris Kennaway [mailto:[EMAIL PROTECTED] >Sent: Wednesday, April 12, 2006 10:53 AM >To: Alex Zbyslaw >Cc: Ted Mittelstaedt; freebsd-questions@freebsd.org >Subject: Re: upcoming release 6.1: old version of some core components > >> >

RE: upcoming release 6.1: old version of some core components

2006-04-12 Thread Ted Mittelstaedt
>-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of >[EMAIL PROTECTED]@mgEDV.net >Sent: Wednesday, April 12, 2006 4:00 AM >To: freebsd-questions@freebsd.org >Subject: RE: upcoming release 6.1: old version of some core components > &g

Re: upcoming release 6.1: old version of some core components

2006-04-12 Thread Kris Kennaway
On Wed, Apr 12, 2006 at 09:07:11PM +0200, martinko wrote: > and it feels they're not going to release 1.0 any time soon.. i've been > seeing 0.9.something for longer than i can remember. > > and btw i've always thought of openssl and openssh as somehow > coupled/interconnected. but openssl hasn't

Re: upcoming release 6.1: old version of some core components

2006-04-12 Thread martinko
Kris Kennaway wrote: > On Wed, Apr 12, 2006 at 08:42:44PM +0200, martinko wrote: > >>Kris Kennaway wrote: >> >>>On Tue, Apr 11, 2006 at 05:46:06PM +0200, [EMAIL PROTECTED]@mgEDV.net wrote: >>> >>> >I can't answer you main question, but I would say that you can bet your >shirt on the

Re: upcoming release 6.1: old version of some core components

2006-04-12 Thread Kris Kennaway
On Wed, Apr 12, 2006 at 08:42:44PM +0200, martinko wrote: > Kris Kennaway wrote: > > On Tue, Apr 11, 2006 at 05:46:06PM +0200, [EMAIL PROTECTED]@mgEDV.net wrote: > > > >> > >> > >>>I can't answer you main question, but I would say that you can bet your > >>>shirt on the fact that there will be n

Re: upcoming release 6.1: old version of some core components

2006-04-12 Thread martinko
Kris Kennaway wrote: > On Tue, Apr 11, 2006 at 05:46:06PM +0200, [EMAIL PROTECTED]@mgEDV.net wrote: > >> >> >>>I can't answer you main question, but I would say that you can bet your >>>shirt on the fact that there will be no known security issues in the >>>older packages. >> >>>At least for op

Re: upcoming release 6.1: old version of some core components

2006-04-12 Thread Kris Kennaway
On Wed, Apr 12, 2006 at 10:18:08AM +0100, Alex Zbyslaw wrote: > Ted Mittelstaedt wrote: > > >Alex, you would lose that bet, zlib 1.2.2 has a hole in it, it > >should have been replaced with 1.2.3 See the zlib website > >for more info. > > > >Nospam, good catch, if none of the hip-shooters here fi

RE: upcoming release 6.1: old version of some core components

2006-04-12 Thread [EMAIL PROTECTED]@mgEDV.net
did i ever mention "i love communities!" ;-) well, 1st of all, thx 2 all the people who gave it a whirl and went deeper into cvs as i would ever do (i'm definitely not a dev ;-), btw. that was my reason for asking this on the list ) 2nd, the thing alex brought up is very confusing, because it se

Re: upcoming release 6.1: old version of some core components

2006-04-12 Thread Alex Zbyslaw
Ted Mittelstaedt wrote: Alex, you would lose that bet, zlib 1.2.2 has a hole in it, it should have been replaced with 1.2.3 See the zlib website for more info. Nospam, good catch, if none of the hip-shooters here file a PR I'll get around to it the next time I get a running build off the cvs.

RE: upcoming release 6.1: old version of some core components

2006-04-11 Thread Ted Mittelstaedt
D] >[mailto:[EMAIL PROTECTED] Behalf Of >[EMAIL PROTECTED]@mgEDV.net >Sent: Tuesday, April 11, 2006 5:55 AM >To: freebsd-questions@freebsd.org >Subject: upcoming release 6.1: old version of some core components > > > >hi together, > >during testing the 6.1-BETA4 i

RE: upcoming release 6.1: old version of some core components

2006-04-11 Thread Ted Mittelstaedt
Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of Alex Zbyslaw >Sent: Tuesday, April 11, 2006 6:25 AM >To: freebsd-questions@freebsd.org >Subject: Re: upcoming release 6.1: old version of some core components > > >[EMAIL PROTECTED]@mgEDV.net w

Re: upcoming release 6.1: old version of some core components

2006-04-11 Thread Kris Kennaway
On Tue, Apr 11, 2006 at 05:46:06PM +0200, [EMAIL PROTECTED]@mgEDV.net wrote: > > > I can't answer you main question, but I would say that you can bet your > >shirt on the fact that there will be no known security issues in the > > older packages. > > > At least for openssl and openssh you can

Re: upcoming release 6.1: old version of some core components

2006-04-11 Thread Lowell Gilbert
"[EMAIL PROTECTED]@mgEDV.net" <[EMAIL PROTECTED]> writes: > as for zlib i definitely know, that there are 2 security flaws, which can > lead to problems when invalid compressed data is feeded. I doubt it. I am reasonably sure you are talking about: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/adviso

Re: upcoming release 6.1: old version of some core components

2006-04-11 Thread Dan Nelson
In the last episode (Apr 11), [EMAIL PROTECTED]@mgEDV.net said: > > I can't answer you main question, but I would say that you can bet your > >shirt on the fact that there will be no known security issues in the > > older packages. > > > At least for openssl and openssh you can get latest versio

Re: upcoming release 6.1: old version of some core components

2006-04-11 Thread Alex Zbyslaw
[EMAIL PROTECTED]@mgEDV.net wrote: I can't answer you main question, but I would say that you can bet your shirt on the fact that there will be no known security issues in the older packages. At least for openssl and openssh you can get latest versions through the ports. Not an

RE: upcoming release 6.1: old version of some core components

2006-04-11 Thread [EMAIL PROTECTED]@mgEDV.net
> I can't answer you main question, but I would say that you can bet your >shirt on the fact that there will be no known security issues in the > older packages. > At least for openssl and openssh you can get latest versions through the > ports. Not an option for everything -- I see no zlib

Re: upcoming release 6.1: old version of some core components

2006-04-11 Thread Alex Zbyslaw
[EMAIL PROTECTED]@mgEDV.net wrote: during testing the 6.1-BETA4 i found only one major thing i really like to discuss on the list for my understanding. why are some major parts of the os are not updated to the current versions (see examples beyond)? code-improvements and security-/functionality

Re: upcoming release 6.1: old version of some core components

2006-04-11 Thread Bill Moran
On Tue, 11 Apr 2006 14:55:06 +0200 "[EMAIL PROTECTED]@mgEDV.net" <[EMAIL PROTECTED]> wrote: > > hi together, > > during testing the 6.1-BETA4 i found only one major thing > i really like to discuss on the list for my understanding. > > why are some major parts of the os are not updated to the >

upcoming release 6.1: old version of some core components

2006-04-11 Thread [EMAIL PROTECTED]@mgEDV.net
hi together, during testing the 6.1-BETA4 i found only one major thing i really like to discuss on the list for my understanding. why are some major parts of the os are not updated to the current versions (see examples beyond)? code-improvements and security-/functionality-fixes come to my mind