Re: Prefer pkgsrc OpenSSL after 2016Q1.

[Kamil Rytarowski <n54%gmx.com@localhost>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 09.03.2016 23:35, J. Lewis Muir wrote:
> On 3/9/16 3:58 PM, Kamil Rytarowski wrote:
>> This idea originated from the fact that we don't actively
>> release advisories for stable releases.
> 
> Hi, Kamil.
> 
> I'm confused by this.  NetBSD *does* issue advisories, at least for
> the supported releases (i.e. netbsd-6 and netbsd-7 stable
> branches).  See
> 
> http://netbsd.org/support/security/
> 
> and the security-announce mailing list archive at
> 
> http://mail-index.netbsd.org/security-announce/
> 
> I must be missing something about what you're saying.
> 
> Regards,
> 
> Lewis
> 

Please check the dates of the most recent advisories:
http://netbsd.org/support/security/

The latest advisory is from 2015.

Please see for example this page for the latest stable release:
http://netbsd.org/support/security/patches-7.0.html

"NetBSD 7.0 Security Advisories

Below is the list of advisories applicable to the NetBSD 7.0 release:

    Nothing thus far"


This is why I formulated it by not active field, while users do check
these pages and they are worried. I'm not a person in security team I
cannot point them any actions taken off-hand - for example for DROWN.
Answer to pick-up -current isn't appropriate for everybody.

Thanks,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=DuP4
-----END PGP SIGNATURE-----