Re: Security Patch Announcements

2012-05-02 Thread Sebastian Reitenbach 
On Tuesday, May 1, 2012 18:36 CEST, Martin SchrC6der mar...@oneiros.de
wrote:

 2012/5/1 llemike...@aol.com llemike...@aol.com:
  security-announce

 This list is not used.

  Did I miss something? Was it announced on another list?

 This has been discussed before: Patches are not announced.

But citing the 5.1 Announce E-Mail:

...
Security patch announcements are sent to the security-annou...@openbsd.org
mailing list. For information on OpenBSD mailing lists, please see:

http://www.OpenBSD.org/mail.html
...

But that may be a wrong cut'n pasto from older announcements. So
something seems to be wrong, or at least not absolutely clear.

Sebastian


 Best
Martin

Re: Security Patch Announcements

2012-05-02 Thread Martin Schröder 
2012/5/2 Sebastian Reitenbach sebas...@l00-bugdead-prods.de:
 On Tuesday, May 1, 2012 18:36 CEST, Martin SchrC6der mar...@oneiros.de
 wrote:
 But citing the 5.1 Announce E-Mail:

 ...
 Security patch announcements are sent to the security-annou...@openbsd.org
 mailing list. For information on OpenBSD mailing lists, please see:

That is a lie.

That list has a public archive. How many mails have there been in this century?

Best
   Martin

Re: Security Patch Announcements

2012-05-02 Thread Ted Unangst 
On Wed, May 02, 2012 at 11:44, Martin SchrC6der wrote:
 2012/5/2 Sebastian Reitenbach sebas...@l00-bugdead-prods.de:
 On Tuesday, May 1, 2012 18:36 CEST, Martin SchrC6der mar...@oneiros.de
 wrote:
 But citing the 5.1 Announce E-Mail:

 ...
 Security patch announcements are sent to the security-annou...@openbsd.org
 mailing list. For information on OpenBSD mailing lists, please see:

 That is a lie.

 That list has a public archive. How many mails have there been in this
 century?

It is supposed to be true.  It just... isn't.  :(

Security Patch Announcements

2012-05-01 Thread llemike...@aol.com 

Dear Put your name here,   ;-)

Using 5.0 I have now installed the two patches issued:

1) BIND patch from 01/12/2011
2) libcrypto patch from 23/04/12

What I cannot understand is that I have been registered
on the following mailing lists since 5 April 2012:

misc
tech
security-announce

However, I haven't seen an announcement of the libcrypto
patch on these lists.

Did I miss something? Was it announced on another list?

Mike

Re: Security Patch Announcements

2012-05-01 Thread Martin Schröder 
2012/5/1 llemike...@aol.com llemike...@aol.com:
 security-announce

This list is not used.

 Did I miss something? Was it announced on another list?

This has been discussed before: Patches are not announced.

Best
   Martin

Re: Security Patch Announcements

2012-05-01 Thread llemike...@aol.com 

Martin,

Aaaa! I see. So I didn't miss anything.

Thanks for the swift response.

Mike