Date: Fri, 12 Jun 2026 20:55:30 +0200 From: np <dev@nicolas-provost.fr> To: stable@freebsd.org, freebsd-stable@FreeBSD.org Subject: Re: Unable to apply errata EN-26:15 (OpenSSL) Message-ID: <756482B0-7195-45E2-B554-381F672B6FDD@nicolas-provost.fr> In-Reply-To: <202606121711.65CHB14L009035@mp80.oldach.net>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] I was surprised that even gpatch would not accept this 27mb-super-patch. As I'm using fossil and not git for my tree I did not try git-patch this time. But it seems that its content can be produced by computing a diff between tags freebsd-15.0-p9 and freebsd-15.0-p10. Ideally, OpenSSL should be updated more often, not only on CVE announces. Another caveat is that EN-26:15 and SA-26:35, both OpenSSL-related, were published the same day. I know that most people are using git. But I got once again a source tree corrupted last week (llama.cpp.git) without git reporting any problem.. so I tried a different way (src.txz + all patches). I understand that git-diff is the most easy way to update that thing, but it is sad that we cannot use BSD tools or the tools of the base system to update our OS. Le 12 juin 2026 19:11:01 GMT+02:00, freebsd@oldach.net a écrit : >Dave Cottlehuber wrote on Fri, 12 Jun 2026 11:17:36 +0200 (CEST): >> $ git clone --single-branch -b releng/15.0 https://git.freebsd.org/src.git /usr/src > >At the risk of stating the obvious, the EN-26:15 patch is already included here. > >> $ fetch https://security.FreeBSD.org/patches/EN-26:15/openssl-15.0.patch -o - | patch --dry-run > >> patch: **** malformed patch at line 618620: */ > >The patch is broken. Have a look at said line, you'll notice instantly. > >Kind regards >Helge > [-- Attachment #2 --] <html><head></head><body><div dir="auto">I was surprised that even gpatch would not accept this 27mb-super-patch.<br><br>As I'm using fossil and not git for my tree I did not try git-patch this time. But it seems that its content can be produced by computing a diff between tags freebsd-15.0-p9 and freebsd-15.0-p10.<br><br>Ideally, OpenSSL should be updated more often, not only on CVE announces.<br><br>Another caveat is that EN-26:15 and SA-26:35, both OpenSSL-related, were published the same day.<br><br>I know that most people are using git. But I got once again a source tree corrupted last week (llama.cpp.git) without git reporting any problem.. so I tried a different way (src.txz + all patches).<br><br>I understand that git-diff is the most easy way to update that thing, but it is sad that we cannot use BSD tools or the tools of the base system to update our OS.</div><br><br><div class="gmail_quote"><div dir="auto">Le 12 juin 2026 19:11:01 GMT+02:00, freebsd@oldach.net a écrit :</div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <pre class="com-fsck-k9__plain-text-message-pre"><div dir="auto">Dave Cottlehuber wrote on Fri, 12 Jun 2026 11:17:36 +0200 (CEST):<br></div><blockquote class="gmail_quote" style="margin-bottom: 1ex; --com-fsck-k9__blockquote-default-border-color: #729fcf;"><div dir="auto">$ git clone --single-branch -b releng/15.0 <a href="https://git.freebsd.org/src.git">https://git.freebsd.org/src.git</a>; /usr/src<br></div></blockquote><div dir="auto"><br>At the risk of stating the obvious, the EN-26:15 patch is already included here.<br><br></div><blockquote class="gmail_quote" style="margin-bottom: 1ex; --com-fsck-k9__blockquote-default-border-color: #729fcf;"><div dir="auto">$ fetch <a href="https://security.FreeBSD.org/patches/EN-26:15/openssl-15.0.patch">https://security.FreeBSD.org/patches/EN-26:15/openssl-15.0.patch</a>; -o - | patch --dry-run<br></div></blockquote><div dir="auto"><br></div><blockquote class="gmail_quote" style="margin-bottom: 1ex; --com-fsck-k9__blockquote-default-border-color: #729fcf;"><div dir="auto">patch: **** malformed patch at line 618620: */<br></div></blockquote><div dir="auto"><br>The patch is broken. Have a look at said line, you'll notice instantly.<br><br>Kind regards<br>Helge<br><br></div></pre></blockquote></div></body></html>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?756482B0-7195-45E2-B554-381F672B6FDD>