Quarterly packages and security updates...

2015-08-13 Thread Mason Loring Bliss
A recently quarterly report: https://www.freebsd.org/news/status/report-2015-04-2015-06.html and last week's BSD Now episode both hint that quarterly packages will be the default for 10.2. I just looked, and sure enough:

Re: Quarterly packages and security updates...

2015-08-13 Thread Mason Loring Bliss
On Thu, Aug 13, 2015 at 08:40:23PM +, Glen Barber wrote: [info@ removed, not sure why that email address was included.] I'm hoping for pressure from above, as this is an important step that's evidently being taken without quarterly branch security being bumped up in priority. It seems to

Re: Quarterly packages and security updates...

2015-08-13 Thread Glen Barber
On Thu, Aug 13, 2015 at 05:01:29PM -0400, Mason Loring Bliss wrote: On Thu, Aug 13, 2015 at 08:40:23PM +, Glen Barber wrote: [info@ removed, not sure why that email address was included.] I'm hoping for pressure from above, as this is an important step that's evidently being taken

Re: Quarterly packages and security updates...

2015-08-13 Thread Glen Barber
[info@ removed, not sure why that email address was included.] On Thu, Aug 13, 2015 at 04:20:08PM -0400, Mason Loring Bliss wrote: A recently quarterly report: https://www.freebsd.org/news/status/report-2015-04-2015-06.html and last week's BSD Now episode both hint that quarterly

Re: Quarterly packages and security updates...

2015-08-13 Thread Mason Loring Bliss
On Thu, Aug 13, 2015 at 04:20:08PM -0400, Mason Loring Bliss wrote: subversion-1.8.10_3 is vulnerable: To clarify, I had this one artificially held back. The up to date quarterly package vulnerability list for Subversion looks like this: subversion-1.8.13_2 is vulnerable: subversion --