Quarterly packages and security updates...

2015-08-13 Thread Mason Loring Bliss
A recently quarterly report: https://www.freebsd.org/news/status/report-2015-04-2015-06.html and last week's BSD Now episode both hint that quarterly packages will be the default for 10.2. I just looked, and sure enough: https://svnweb.freebsd.org/base/releng/10.2/etc/pkg/FreeBSD.conf?vi

Re: Quarterly packages and security updates...

2015-08-13 Thread Mason Loring Bliss
On Thu, Aug 13, 2015 at 04:20:08PM -0400, Mason Loring Bliss wrote: > subversion-1.8.10_3 is vulnerable: To clarify, I had this one artificially held back. The up to date quarterly package vulnerability list for Subversion looks like this: subversion-1.8.13_2 is vulnerable: subversion -- multipl

Re: Quarterly packages and security updates...

2015-08-13 Thread Glen Barber
[info@ removed, not sure why that email address was included.] On Thu, Aug 13, 2015 at 04:20:08PM -0400, Mason Loring Bliss wrote: > A recently quarterly report: > > https://www.freebsd.org/news/status/report-2015-04-2015-06.html > > and last week's BSD Now episode both hint that quarterly p

Re: Quarterly packages and security updates...

2015-08-13 Thread Mason Loring Bliss
On Thu, Aug 13, 2015 at 08:40:23PM +, Glen Barber wrote: > [info@ removed, not sure why that email address was included.] I'm hoping for pressure from above, as this is an important step that's evidently being taken without quarterly branch security being bumped up in priority. It seems to co

Re: Quarterly packages and security updates...

2015-08-13 Thread Glen Barber
On Thu, Aug 13, 2015 at 05:01:29PM -0400, Mason Loring Bliss wrote: > On Thu, Aug 13, 2015 at 08:40:23PM +, Glen Barber wrote: > > > [info@ removed, not sure why that email address was included.] > > I'm hoping for pressure from above, as this is an important step that's > evidently being tak