security announces

[Joerg Sonnenberger]

On Wed, Apr 27, 2005 at 05:57:34PM +0300, Yaroslav Tarasenko wrote:
> Hello,
> 	a question to dragonfly team: do you plan to post security announces 
> and binary patches to fix discovered security holes?

(1) We will post security announcements to users@ and kernel@ affecting
the release branch. We might not post them if they only affect PREVIEW
or DEVELOPMENT, those using them are supposed to follow commits@ or
update the system at regular times. It doesn't mean that we never send
out such messages, just don't depend on it :)
(2) No binary patches for the moment. The announcement will contain
information which parts of the system are affected, e.g. whether rebuilding
kernel, a single binary or a library is enough. We currently don't have
the infrastructure for binary patch distribution.

Joerg