ftp.freebsd.org out of date? (WRT security advisories)

[Olafur Osvaldsson]

Nielsen,

On Thu, 18 Sep 2003, Nielsen wrote:

> It seems (at least for me) the patches on ftp.freebsd.org are out of 
> date for the 03:12 security advisory (openssh). ftp2.freebsd.org has 
> them fine.
> 
> I'm wondering if this is a mirror issue or perhaps round-robin DNS problem?

This has to do with the fact that ftp.freebsd.org is a mirror like all the
other ftp*.freebsd.org servers and they sync at different intervals.

> What compounds the issue is that right now the old openssh 3.7 patches 
> are there (on ftp.freebsd.org), but not the 3.7.1 patches (which can be 
> found on ftp2.freebsd.org). This could conceivably cause someone to miss 
> a patch.
> 
> Am i doing something wrong? If not, then this is just a little heads up. 
> Perhaps it would be better to include ftp2.freebsd.org links in the 
> security advisories.

If you are going to do that you might as well add all the mirrors to the
advisories as next time you might have the patch on ftp9 first and not
the others untill later.

/Oli

-- 
Olafur Osvaldsson
Systems Administrator
Internet a Islandi hf.
Tel:   +354 525-5291
Email: oli at isnic.is
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20030918/a3c56541/attachment.bin