From: Balwinder S Dheeman on
On 12/05/2009 08:38 PM, Harald Hanche-Olsen wrote:
> + talon(a)lpthe.jussieu.fr (Michel Talon):
>
>> And for the base system, when you get at the n.2 release, that is when
>> it becomes reasonably debugged, immediately a (n+1).0 release appears,
>> full of bugs, and the n.* becomes unmaintained.
>
> What universe do you live in? It must be quite exciting.
> In mine, it appears that 6.4, 7.1 and 7.2 are still maintained.

Maintained? Or problems are not being reported for these, because either
there no users or nobody bothers to fix ...

--
Balwinder S "bdheeman" Dheeman Registered Linux User: #229709
Anu'z Linux(a)HOME (Unix Shoppe) Machines: #168573, 170593, 259192
Chandigarh, UT, 160062, India Plan9, T2, Arch/Debian/FreeBSD/XP
Home: http://werc.homelinux.net/ Visit: http://counter.li.org/
From: Moe Trin on
On Sun, 06 Dec 2009, in the Usenet newsgroup comp.unix.bsd.freebsd.misc, in
article <7bhsu6xjgq.ln2(a)news.homelinux.net>, Balwinder S Dheeman wrote:

>Harald Hanche-Olsen wrote:

>> What universe do you live in? It must be quite exciting.
>> In mine, it appears that 6.4, 7.1 and 7.2 are still maintained.

>Maintained? Or problems are not being reported for these, because
>either there no users or nobody bothers to fix ...

Don't subscribe to Bugtraq?

=====================================
Topic: SSL protocol flaw

Category: contrib
Module: openssl
Announced: 2009-12-03
Credits: Marsh Ray, Steve Dispensa
Affects: All supported versions of FreeBSD.
Corrected: 2009-12-03 09:18:40 UTC (RELENG_8, 8.0-STABLE)
2009-12-03 09:18:40 UTC (RELENG_8_0, 8.0-RELEASE-p1)
2009-12-03 09:18:40 UTC (RELENG_7, 7.2-STABLE)
2009-12-03 09:18:40 UTC (RELENG_7_2, 7.2-RELEASE-p5)
2009-12-03 09:18:40 UTC (RELENG_7_1, 7.1-RELEASE-p9)
2009-12-03 09:18:40 UTC (RELENG_6, 6.4-STABLE)
2009-12-03 09:18:40 UTC (RELENG_6_4, 6.4-RELEASE-p8)
2009-12-03 09:18:40 UTC (RELENG_6_3, 6.3-RELEASE-p14)
CVE Name: CVE-2009-3555

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:http://security.FreeBSD.org/>.
=====================================

Looks like a few older releases are still being maintained as of last
Thursday. If you can't spare the time to subscribe to the mailing
list, grab the full list of newsgroups your news server carries, and
search for the string 'bugtraq' to find which of the 20+ groups that
mirror it are available. It's averaging 250 posts/articles a month.

Old guy
From: Michel Talon on
Moe Trin <ibuprofin(a)painkiller.example.tld> wrote:
> >Maintained? Or problems are not being reported for these, because
> >either there no users or nobody bothers to fix ...
>
> Don't subscribe to Bugtraq?

Do you mean maintainance is equivalent to fixing security bugs? What
about all over bugs which are infinitely more numerous?


--

Michel TALON

From: Harald Hanche-Olsen on
+ talon(a)lpthe.jussieu.fr (Michel Talon):

> Moe Trin <ibuprofin(a)painkiller.example.tld> wrote:
>> >Maintained? Or problems are not being reported for these, because
>> >either there no users or nobody bothers to fix ...
>>
>> Don't subscribe to Bugtraq?
>
> Do you mean maintainance is equivalent to fixing security bugs? What
> about all over bugs which are infinitely more numerous?

If you follow the appropriate -STABLE branch, such as RELENG_6 or
RELENG_7, you should be getting at least some bug fixes besides security
bugs. If you follow RELENG_6_4 or RELENG_7_2, you get only security and
critical bug fixes (for some value of "critical").

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html

--
* Harald Hanche-Olsen <URL:http://www.math.ntnu.no/~hanche/>
- It is undesirable to believe a proposition
when there is no ground whatsoever for supposing it is true.
-- Bertrand Russell
From: Michel Talon on
Harald Hanche-Olsen <hanche(a)math.ntnu.no> wrote:
> + talon(a)lpthe.jussieu.fr (Michel Talon):
>
> > Moe Trin <ibuprofin(a)painkiller.example.tld> wrote:
> >> >Maintained? Or problems are not being reported for these, because
> >> >either there no users or nobody bothers to fix ...
> >>
> >> Don't subscribe to Bugtraq?
> >
> > Do you mean maintainance is equivalent to fixing security bugs? What
> > about all over bugs which are infinitely more numerous?
>
> If you follow the appropriate -STABLE branch, such as RELENG_6 or
> RELENG_7, you should be getting at least some bug fixes besides security
> bugs. If you follow RELENG_6_4 or RELENG_7_2, you get only security and
> critical bug fixes (for some value of "critical").
>
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html
>

Everybody knows this. Do you really believe one instant that the
developers who are now busy working on the 9.* branch will do anything
non trivial on the 6.* or 7.* branch?

--

Michel TALON