FLAME - security advisories on the 23rd ? uncool idea is uncool

[George Kontostanos]

On Fri, Dec 23, 2011 at 10:48 PM, Gary Palmer <gpalmer at freebsd.org> wrote:
> On Fri, Dec 23, 2011 at 08:55:35PM +0200, George Kontostanos wrote:
>> On Fri, Dec 23, 2011 at 8:40 PM, Matthew Seaman
>> <m.seaman at infracaninophile.co.uk> wrote:
>> > On 23/12/2011 18:05, George Kontostanos wrote:
>> >> Are all cvs mirror servers updated regarding these changes ?
>> >>
>> >> ANYBODY ????
>> >
>> > Should have by now. ?Commits usually take about an hour to propagate to
>> > the official cvsup servers.
>> >
>> > Easy enough to tell though -- the advisories have all the version
>> > numbers in, and you'ld only need to check a file or two from each of
>> > them to be reasonably sure you'ld got all the updates.
>> >
>> > ? ? ? ?Cheers,
>> >
>> > ? ? ? ?Matthew
>> >
>> > --
>> > Dr Matthew J Seaman MA, D.Phil. ? ? ? ? ? ? ? ? ? 7 Priory Courtyard
>> > ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?Flat 3
>> > PGP: http://www.infracaninophile.co.uk/pgpkey ? ? Ramsgate
>> > JID: matthew at infracaninophile.co.uk ? ? ? ? ? ? ? Kent, CT11 9PW
>> >
>>
>> Thanks for the info Matthew. I think though that it is best for all to
>> first make sure that the servers all updated before sending out all
>> those security advisories.
>
> I don't believe they're monitored like that.  If you want the updates
> quickly, download the files referenced in the advisories.  My build was
> done before my local cvsup server picked up the changes.
>
> Gary

Yes, that's easy if you dealing with one server. But it is very
different when you have to apply those patches to 20 different servers
that are in different locations. Having a local cvsup server doing
this job tends to make updating easier.

In any case, and IMHO this was not the proper time for this kind of
advisories considering the fact that many companies are in a freeze
period.

Cheers

-- 
George Kontostanos