Re: Updates for old releases

2008-02-24 Thread Kenneth R Westerback
On Sat, Feb 23, 2008 at 10:44:21PM -0300, Antonio Lobato wrote:
 great!
 thank you all for the help.

 right now Im compiling the source for openbsd 4.0 stable (at least the 
 last, since it is no  linger maintained)

 I know it is better to use 4.2, but it does not depends only of my opnion,
 I'm configuring the firewall for a customer, and now I can at most
 make a advice.



 Tom

You should tell the customer that 4.0 is no longer supported. Only
4.2 and 4.1 are supported. And in a couple of months when 4.3 is
released, 4.1 will no longer be supported.

This is in addition to the major improvements for firewall
performance that are in 4.2 and have already been mentioned.

 Ken



Re: Updates for old releases

2008-02-23 Thread Maurice Janssen
On Friday, February 22, 2008 at 12:07:43 +, Edd wrote:
On Fri, Feb 22, 2008 at 10:33:00AM +0100, Maurice Janssen wrote:
 About a year ago I started to create regular builds of the -stable
 trees (the two supported trees).  You can use them, if you trust me ;-)
 You can find links to some mirrors on http://www.z74.net/openbsd.html

I think it is great that you are doing this, however why are you a third
party? Can you not upload your binaries to the official mirrors?

I'd be happy to upload it to the official ftp-site and mirrors, but I'm
not a OpenBSD developer.  If the OpenBSD team has enough trust and would
like to put these file sets on the official mirrors, then they are of
course more than welcome to do so.

I'm not sure if all mirrors are able to spare a few extra GB for the
stable file sets and I don't have the hardware to build a release for
all supported architectures.  I don't know if this is a real problem.

Maurice



Re: Updates for old releases

2008-02-23 Thread Antonio Lobato

great!
thank you all for the help.

right now Im compiling the source for openbsd 4.0 stable (at least the 
last, since it is no  linger maintained)


I know it is better to use 4.2, but it does not depends only of my opnion,
I'm configuring the firewall for a customer, and now I can at most
make a advice.



Tom



Re: Updates for old releases

2008-02-23 Thread johan beisser

On Feb 23, 2008, at 5:44 PM, Antonio Lobato wrote:

I know it is better to use 4.2, but it does not depends only of my  
opnion,

I'm configuring the firewall for a customer, and now I can at most
make a advice.


Advise them to use 4.2. There are significant speed improvements to  
pf, among other things.




Re: Updates for old releases

2008-02-22 Thread Mark Prins
2008/2/22, Antonio Lobato [EMAIL PROTECTED]:
  Hi all!

 I read http://openbsd.org/security.html (and stable.html), but could
  not make
  sure about my question.

 If today I download old versions (say /pub/OpenBSD/4.0/i386/cd40.iso) of
   openbsd, does it already includes the fixes listed in

release != stable; you'll have to apply the patches (or get the/a newer release)



Re: Updates for old releases

2008-02-22 Thread Guido Tschakert
Antonio Lobato schrieb:
Hi all!
 
I read http://openbsd.org/security.html (and stable.html), but could
 not make
 sure about my question.
 
If today I download old versions (say /pub/OpenBSD/4.0/i386/cd40.iso) of
 openbsd, does it already includes the fixes listed in
 http://openbsd.org/security.html#40 (or #41)? 
No

If no, is there available
 the same
 cd40.iso but including these fixes or must I to apply the patches on
 original
 system?

No, and don't use 4.0 as 4.2 is already available and supported.

 
If there is some doc explaining it with more details, please give me
 the pointers.
  Thanks,
 
You want to check
http://www.openbsd.org/faq/faq5.html#Flavors

 
 
Tom
 
 


guido



Re: Updates for old releases

2008-02-22 Thread Edd
On Fri, Feb 22, 2008 at 05:48:14AM -0300, Antonio Lobato wrote:
Hi all!

I read http://openbsd.org/security.html (and stable.html), but could not 
 make
 sure about my question.

If today I download old versions (say /pub/OpenBSD/4.0/i386/cd40.iso) of
 openbsd, does it already includes the fixes listed in
 http://openbsd.org/security.html#40 (or #41)? If no, is there available the 
 same
 cd40.iso but including these fixes or must I to apply the patches on 
 original
 system?

It is the original release cdrom. What you can do is make your own iso
image. See man release.


-- 

Best Regards
Edd

http://students.dec.bmth.ac.uk/ebarrett



Re: Updates for old releases

2008-02-22 Thread Maurice Janssen
On Friday, February 22, 2008 at 05:48:14 -0300, Antonio Lobato wrote:
   Hi all!

   I read http://openbsd.org/security.html (and stable.html), but could 
not make
sure about my question.

   If today I download old versions (say /pub/OpenBSD/4.0/i386/cd40.iso) of
openbsd, does it already includes the fixes listed in
http://openbsd.org/security.html#40 (or #41)? If no, is there available 
the same
cd40.iso but including these fixes or must I to apply the patches on 
original
system?

   If there is some doc explaining it with more details, please give me 
the pointers.

There's more on this on
http://www.openbsd.org/faq/faq5.html#Flavors
To summarize: what's on the CD's and FTP-servers is -release, it is
not updated.  The patches for -stable are only distributed as source
code.
There are no official builds of the -stable tree.

About a year ago I started to create regular builds of the -stable
trees (the two supported trees).  You can use them, if you trust me ;-)
You can find links to some mirrors on http://www.z74.net/openbsd.html

Maurice



Re: Updates for old releases

2008-02-22 Thread Edd
On Fri, Feb 22, 2008 at 10:33:00AM +0100, Maurice Janssen wrote:
 About a year ago I started to create regular builds of the -stable
 trees (the two supported trees).  You can use them, if you trust me ;-)
 You can find links to some mirrors on http://www.z74.net/openbsd.html

I think it is great that you are doing this, however why are you a third
party? Can you not upload your binaries to the official mirrors?

-- 

Best Regards
Edd

http://students.dec.bmth.ac.uk/ebarrett



Re: Updates for old releases

2008-02-22 Thread Jay Hart
One question I have is if 4.0 is stilled being patched?  I notice that there
are several patches out in 4.2 or 4.1, for example:

005: RELIABILITY FIX: January 11, 2008   All architectures
A missing NULL pointer check can lead to a kernel panic.
A source code patch exists which remedies this problem

But either these don't apply to 4.0, or 4.0 is not having patches created
anymore.

That is the official policy for older releases with regards to patches?

Thanks,

Jay

 2008/2/22, Antonio Lobato [EMAIL PROTECTED]:
  Hi all!

 I read http://openbsd.org/security.html (and stable.html), but could
  not make
  sure about my question.

 If today I download old versions (say /pub/OpenBSD/4.0/i386/cd40.iso) of
   openbsd, does it already includes the fixes listed in

 release != stable; you'll have to apply the patches (or get the/a newer
 release)



Re: Updates for old releases

2008-02-22 Thread Markus Hennecke

Jay Hart schrieb:

One question I have is if 4.0 is stilled being patched?  I notice that there
are several patches out in 4.2 or 4.1, for example:

005: RELIABILITY FIX: January 11, 2008   All architectures
A missing NULL pointer check can lead to a kernel panic.
A source code patch exists which remedies this problem

But either these don't apply to 4.0, or 4.0 is not having patches created
anymore.


Because 4.0 is no longer maintained after 4.2 was released.


That is the official policy for older releases with regards to patches?


http://www.openbsd.org/faq/faq5.html#Flavors

Kind regards,
  Markus



Re: Updates for old releases

2008-02-22 Thread Stuart VanZee
Jay,

Only the current version (4.2) and 1 previous version (4.1)
are supported.  That means no more patches for 4.0 as soon
as 4.2 came out.  For more information, please refer to the
OpenBSD FAQ.

s

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of
 Jay Hart
 Sent: Friday, February 22, 2008 8:41 AM
 To: Mark Prins
 Cc: misc@openbsd.org
 Subject: Re: Updates for old releases


 One question I have is if 4.0 is stilled being patched?  I
 notice that there
 are several patches out in 4.2 or 4.1, for example:

 005: RELIABILITY FIX: January 11, 2008   All architectures
 A missing NULL pointer check can lead to a kernel panic.
 A source code patch exists which remedies this problem

 But either these don't apply to 4.0, or 4.0 is not having
 patches created
 anymore.

 That is the official policy for older releases with regards
 to patches?

 Thanks,

 Jay

  2008/2/22, Antonio Lobato [EMAIL PROTECTED]:
   Hi all!
 
  I read http://openbsd.org/security.html (and
 stable.html), but could
   not make
   sure about my question.
 
  If today I download old versions (say
 /pub/OpenBSD/4.0/i386/cd40.iso) of
openbsd, does it already includes the fixes listed in
 
  release != stable; you'll have to apply the patches (or get
 the/a newer
  release)



Re: Updates for old releases

2008-02-22 Thread Jay Hart
 Jay Hart schrieb:
 One question I have is if 4.0 is stilled being patched?  I notice that there
 are several patches out in 4.2 or 4.1, for example:

 005: RELIABILITY FIX: January 11, 2008   All architectures
 A missing NULL pointer check can lead to a kernel panic.
 A source code patch exists which remedies this problem

 But either these don't apply to 4.0, or 4.0 is not having patches created
 anymore.

 Because 4.0 is no longer maintained after 4.2 was released.

Thanks, that means I will be upgrading to 4.2 stable (at least) this weekend.

Jay


 That is the official policy for older releases with regards to patches?

 http://www.openbsd.org/faq/faq5.html#Flavors

 Kind regards,
Markus