Mailing list "announce" missing Security Advisories?

A-4

A-4

I am subscribed to mailing list announce since 22-Feb-2022 and have received 5 errata notices, and the "FreeBSD 12.2 end-of-life" mail.

However, I haven't received the security advisories: 2022-03-15 FreeBSD-SA-22:03.openssl and 2022-03-15 FreeBSD-SA-22:02.wifi.

So I went looking at the archives at lists.freebsd.org/archives/
freebsd-announce/-2022-Mar-16 12:05
Click to expand...
So the last message date is 2022-Mar-16 12:05 ?

However at lists.freebsd.org/archives/freebsd-announce/2022-March/index.html

Click to expand...
And there, nothing past 11 march is listed. Is this because it's moderated or is that a bug?
In bugzilla I found something maybe related:
Bug 261168 - Delayed or non-appearance of e-mails at lists.freebsd.org/archives/

Searching further, the security advisories are visible in the security mailing list.
Click to expand...
According to the FreeBSD Security Information page:
Advisories affecting the base system are sent to the following mailing lists:
Click to expand...
And in security-notifications there's also no security advisory listed.

The previous security advisory 2022-01-11 FreeBSD-SA-22:01.vt I can find in all 3 mailing lists.

Are the security advisories still underway waiting approval or did something go wrong?
 
A-4 said:
Are the security advisories still underway waiting approval
Click to expand...
If they were still waiting for approval they wouldn't have been posted to the website and made available through freebsd-update(8). The fact you can install the patches means they've been approved. I'm sure the announcements will come through shortly. Maybe something went wrong with the script that posts them.
 
SirDice said:
The fact you can install the patches means they've been approved.
Click to expand...
Sorry for not being clear.
What I meant was: Is the mail concerning the security advisory to the mailing list just delayed because it's waiting for approval from a mailing list moderator?
 
A-4 said:
Is the mail concerning the security advisory to the mailing list just delayed because it's waiting for approval from a mailing list moderator?
Click to expand...
Don't know, can't tell. But the fact they haven't appeared on the announce mailing list suggests they're stuck somewhere.
 
Ths is not about mail but newsgroups. The latest advisories have been posted already to comp.unix.bsd.freebsd.announce. That channel of information has been reliable in the past, too.
 
  • Thanks
Reactions: A-4
mer said:
Do security things wind up on announce or on security-notifications?
Click to expand...
They should also appear on announce. Just look at the previous month for the previous errata/security issues.
 
  • Like
Reactions: mer
A-4 said:
I am subscribed to mailing list announce since 22-Feb-2022 and have received 5 errata notices, and the "FreeBSD 12.2 end-of-life" mail.

However, I haven't received the security advisories: 2022-03-15 FreeBSD-SA-22:03.openssl and 2022-03-15 FreeBSD-SA-22:02.wifi.
Click to expand...
I've received in my e-mail (same country-NL):
FreeBSD Security Advisory FreeBSD-SA-22:03.openssl -- "15 March, 2022 20:29",
FreeBSD Security Advisory FreeBSD-SA-22:02.wifi -- "15 March, 2022 20:29"

I've also received the mentioned 5 errata notices on 15 March; my only subscription is to freebsd-announce@FreeBSD.org
 
  • Thanks
Reactions: A-4
Maybe it's just the mailing list browser that needs a kick, perhaps it hasn't picked up new posts yet.
 
chrbr said:
Ths is not about mail but newsgroups. The latest advisories have been posted already to comp.unix.bsd.freebsd.announce. That channel of information has been reliable in the past, too.
Click to expand...
Thank you, I'll keep it in mind.
Erichans said:
I've received in my e-mail (same country):
FreeBSD Security Advisory FreeBSD-SA-22:03.openssl -- "15 March, 2022 20:29",
FreeBSD Security Advisory FreeBSD-SA-22:02.wifi -- "15 March, 2022 20:29"
Click to expand...
Thank you for mentioning this. Maybe my mail provider (KPN) thought that more than 5 mails in the same minute is spam? I'll add announce to my gmail account and see if in the future things go missing again.

Edit: Just noticed I didn't get the mail FreeBSD Quarterly Status Report - Fourth Quarter 2021 Joseph Mingrone either.

SirDice said:
Maybe it's just the mailing list browser that needs a kick, perhaps it hasn't picked up new posts yet.
Click to expand...
I still think it's weird that the archive for announce is not (yet?) up to date, when for example archive ports-all has mail just over 2 hours old.
 
A-4 said:
… I didn't get the mail FreeBSD Quarterly Status Report - Fourth Quarter 2021 Joseph Mingrone either. …
Click to expand...

Received here:

1647455368706.png
 
Good evening grahamperrin,
when I read my post now it is really unclear. I meant the following text about comp.unix.bsd.freebsd.announce. This is a newsgroup available on NNTP servers one can communicate with news/slrn or news/tin or so. The topic of the thread is about mail. I just wanted to show a different medium. Nowadays NNTP has lost of importance but it is still an efficient way of communication.
Please excuse me to be so unclear :oops:.
 
Erichans said:
I misappropriated one, sorry.
Click to expand...
Whoops, me too. Let's just say I'm in UTC-1. ;)

This is all I've received so far from the mailing list announce:
Mailinglist.png

(Local time is UTC+1.)
I've checked spam, searched my whole mailbox, nothing more. And I never delete anything.

It's just a private server (running happily since FreeBSD 10.0) so missing a security mail isn't really a big problem. Now that I know mails sometimes get misappropriated by demons I'm warned and I'll check other sources regularly.
I've also added my Gmail account to announce so I've got some redundancy.

Now I just need to wait and see when and if the announce archives get the mails. Then I can be sure there's access to a complete backlog. If not I'll check the newsgroup recommended by chrbr.

chrbr said:
when I read my post now it is really unclear.
news/slrn or news/tin
Click to expand...
Actually, I got it. :D
Thanks for the port suggestions.

Thank you, to everyone helping me solve my problem.
 
Please see below a screenshot taken with scrot. The latest advisories do now have the green -100. The -100 is the score due to age. All posts have been read already.
 

Attachments

  • slrn.png
    slrn.png
    238.7 KB · Views: 270
freenews.netfront.net here. The tin view of things is, at a glance, no different from the Thunderbird view:

1647467673126.png
  • none of this year's errata notices or security advisories
– if I'm not mistaken, fifteen or more items are not present.

chrbr please, which NNTP server do you use? Now I see, news.tota-refugium.de
 
news.tota-refugium.de requires authentication, can anyone suggest a freely available NNTP server that's more likely to receive the security advisories and so on?

Thanks.

A-4 said:
problem with free news-servers,
Click to expand...

So some servers silently fail to receive news?
 
To register at news.tota-refugim.de it should be possible at https://register.tota-refugium.de/. The little page is in German only. I did not found a *.org, *.co.uk or so. There are two fields to fill out.
  • Login - I do not remember, it could be the name or so.
  • E-Mail - The server will send the data for access to that address. With this information it should be possible to use the NNTP server.
I have registered years ago. As far as I remember there have been no problems at all.
A list of NNTP servers is https://curlie.org/Computers/Usenet/Public_News_Servers. A popular one is described here: http://www.eternal-september.org/
 
You must log in or register to reply here.
Back
Top