Re: Contradictory statement on vulnerability

2007-03-16 Thread Tobias Weisserth
Hi, On Friday, 16. March 2007 23:41, Jeremy Huiskamp wrote: ... > Um, no. If you apply the errata to -release you have -release + errata. > There are things in stable that are not in the errata, albeit not much. > Tracking -stable requires using cvs which, frankly is much easier than > patching -

Re: Contradictory statement on vulnerability

2007-03-16 Thread Darren Spruell
On 3/16/07, Tobias Weisserth <[EMAIL PROTECTED]> wrote: Hi, On Friday, 16. March 2007 21:04, Karel Kulhavy wrote: ... > Thanks, this is a much better explanation than in FAQ sec. 5. The > explanation in FAQ doesn't mention the fact that not only the -current, but > also the -stable is a moving t

Re: Contradictory statement on vulnerability

2007-03-16 Thread Marc Espie
On Fri, Mar 16, 2007 at 01:31:33PM -0800, smith wrote: > OpenBSD developers add code and fix bugs using a program called CVS. CVS has > the ability to create branches like a tree. The main tree trunk is -current. > After a certain amount of time, usually a couple of months before the release >

Re: Contradictory statement on vulnerability

2007-03-16 Thread Jeremy Huiskamp
On 16-Mar-07, at 4:52 PM, Tobias Weisserth wrote: Hi, On Friday, 16. March 2007 21:04, Karel Kulhavy wrote: ... Thanks, this is a much better explanation than in FAQ sec. 5. The explanation in FAQ doesn't mention the fact that not only the - current, but also the -stable is a moving target,

Re: Contradictory statement on vulnerability

2007-03-16 Thread Ingo Schwarze
Karel Kulhavy wrote on Fri, Mar 16, 2007 at 09:04:50PM +0100: > On Fri, Mar 16, 2007 at 01:33:36PM +0100, Vincent GROSS wrote: >> ok, I'll try to be clear : [...] >> so, in term of patching, >> release + errata = stable and >> release < stable < current > > Thanks, this is a much better expl

Re: Contradictory statement on vulnerability

2007-03-16 Thread Darren Spruell
On 3/16/07, Karel Kulhavy <[EMAIL PROTECTED]> wrote: ... Thanks, this is a much better explanation than in FAQ sec. 5. The explanation in FAQ doesn't mention the fact that not only the -current, but also the -stable is a moving target, though a slowly moving one. Now I have 4.0-release and want

Re: Contradictory statement on vulnerability

2007-03-16 Thread smith
On Fri, 16 Mar 2007 21:04:50 +0100, Karel Kulhavy wrote > Thanks, this is a much better explanation than in FAQ sec. 5. The explanation > in FAQ doesn't mention the fact that not only the -current, but also > the -stable is a moving target, though a slowly moving one. > > Now I have 4.0-release a

Re: Contradictory statement on vulnerability

2007-03-16 Thread Tobias Weisserth
Hi, On Friday, 16. March 2007 21:04, Karel Kulhavy wrote: ... > Thanks, this is a much better explanation than in FAQ sec. 5. The > explanation in FAQ doesn't mention the fact that not only the -current, but > also the -stable is a moving target, though a slowly moving one. > > Now I have 4.0-rele

Re: Contradictory statement on vulnerability

2007-03-16 Thread Karel Kulhavy
On Fri, Mar 16, 2007 at 01:33:36PM +0100, Vincent GROSS wrote: > > ok, I'll try to be clear : > there is a -current branch (HEAD in CVS technobabble). > nearly every six month, -current give birth to a release (CDs). > a release shall move as little as possible. but sometimes, (like now) > there

Re: Contradictory statement on vulnerability

2007-03-16 Thread Travers Buda
* Karel Kulhavy <[EMAIL PROTECTED]> [2007-03-16 12:09:28]: > > In other operating system the concept of upgrading is straightforward - > Windows > ask you and you press OK, in Gentoo Linux you type a magic sequence of magic > commands and your system is up to date. But in OpenBSD it seems that

Re: Contradictory statement on vulnerability

2007-03-16 Thread Ray Percival
On Mar 16, 2007, at 4:09 AM, Karel Kulhavy wrote: I am not following anything That's obvious. - just installed OpenBSD 4.0 from a CD. What should I follow, then? In other operating system the concept of upgrading is straightforward - Windows ask you and you press OK, in Gentoo Linux you t

Re: Contradictory statement on vulnerability

2007-03-16 Thread Lars D . Noodén
On Fri, 16 Mar 2007, Tobias Weisserth wrote: > A nice newbie site explaining this with examples is www.openbsd101.com, if you > don't understand the OpenBSD FAQ. Thanks for posting that one. It hadn't turned up in any of my searches and if it was in any documents I already looked at, I must have

Re: Contradictory statement on vulnerability

2007-03-16 Thread Anton Karpov
> In other operating system the concept of upgrading is straightforward - > Windows > ask you and you press OK, in Gentoo Linux you type a magic sequence of > magic > commands and your system is up to date. In OpenBSD, you type a logical sequence of logical commands and your system is up to date

Re: Contradictory statement on vulnerability

2007-03-16 Thread Tobias Weisserth
Hi, On Friday, 16. March 2007 12:09, Karel Kulhavy wrote: > I am not following anything - just installed OpenBSD 4.0 from a CD. What > should I follow, then? That's your choice. If you just want a stable and reliable OpenBSD then install -release (that's what you did). If you want to keep it pa

Re: Contradictory statement on vulnerability

2007-03-16 Thread Paul de Weerd
On Fri, Mar 16, 2007 at 12:09:28PM +0100, Karel Kulhavy wrote: | I am not following anything - just installed OpenBSD 4.0 from a CD. What should | I follow, then? | | In other operating system the concept of upgrading is straightforward - Windows | ask you and you press OK, in Gentoo Linux you type

Re: Contradictory statement on vulnerability

2007-03-16 Thread Marius ROMAN
You need to read the FAQ : http://cvs.openbsd.org/faq/faq10.html#Patches http://cvs.openbsd.org/faq/upgrade40.html Read the ENTIRE FAQ, because it's there for a GOOD reason. Marius On 3/16/07, Karel Kulhavy <[EMAIL PROTECTED]> wrote: On Fri, Mar 16, 2007 at 09:54:47AM +0100, Vincent GROSS wrot

Re: Contradictory statement on vulnerability

2007-03-16 Thread Karel Kulhavy
On Fri, Mar 16, 2007 at 09:54:47AM +0100, Vincent GROSS wrote: > On 3/16/07, Karel Kulhavy <[EMAIL PROTECTED]> wrote: > >http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1703 > >says: > >Vulnerable Packages > >OpenBSD 4.1 prior to Feb. 26th, 2006. > >OpenBSD 4.0 Current > >Op

Re: Contradictory statement on vulnerability

2007-03-16 Thread Joachim Schipper
On Fri, Mar 16, 2007 at 09:42:47AM +0100, Karel Kulhavy wrote: > http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1703 > says: > Vulnerable Packages > OpenBSD 4.1 prior to Feb. 26th, 2006. > OpenBSD 4.0 Current > OpenBSD 4.0 Stable > [...] > > OpenBSD-current, 4.1, 4.0 and 3