看板FB_security
标 题Re: FreeBSD's heartbleed response
发信站Sentex Communications (Tue Apr 8 21:59:51 2014)
转信站ptt!csnews.cs.nctu!news.cednctu!FreeBSD.cs.nctu!.POSTED!freebsd.org!ow
On 4/8/2014 1:42 PM, Chris Nehren wrote:
> later, FreeBSD remains unpatched. There are many worried
> sysadmins and other users in #freebsd and elsewhere wondering
> what's going on and when their systems will be patched. So far
> all we have is an unofficial gist on github and some discussion
> here (which most users don't see) with no further information.
> More transparency is needed.
* The port was very quickly updated.
* Xin posted a working patch to the list for those who really wanted to
apply it.
* I think it reasonable that code touching such a CRITICAL aspect of the
OS be *well* reviewed before getting committed. IIRC there was a quick
fix to an openssl bug in the past that then had to be fixed again.
* What is stopping people who care about security from joining, or
following this mailing list ?
---Mike
--
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications,
[email protected]
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada
http://www.tancsa.com/
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"