From owner-freebsd-questions@FreeBSD.ORG Mon May 30 10:09:22 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 01022106564A for ; Mon, 30 May 2011 10:09:22 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3fd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id 5BC318FC13 for ; Mon, 30 May 2011 10:09:21 +0000 (UTC) Received: from seedling.local (seedling.black-earth.co.uk [81.187.76.163]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.5/8.14.5) with ESMTP id p4UA9AEw089706 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Mon, 30 May 2011 11:09:17 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.8.3 smtp.infracaninophile.co.uk p4UA9AEw089706 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1306750157; bh=OmQwFgTroJVncYSQN5oO1LMSY6gfvmKk98Zn3U/gBOg=; h=Message-ID:Date:From:MIME-Version:To:Subject:References: In-Reply-To:Content-Type:Cc:Content-Type:Date:From:In-Reply-To: Message-ID:Mime-Version:References:To; z=Message-ID:=20<4DE36CBF.6060602@infracaninophile.co.uk>|Date:=20M on,=2030=20May=202011=2011:09:03=20+0100|From:=20Matthew=20Seaman= 20|User-Agent:=20Mozilla/5.0=20(M acintosh=3B=20U=3B=20Intel=20Mac=20OS=20X=2010.6=3B=20en-US=3B=20r v:1.9.2.17)=20Gecko/20110414=20Thunderbird/3.1.10|MIME-Version:=20 1.0|To:=20freebsd-questions@freebsd.org|Subject:=20Re:=20After=20f reebsd-update....|References:=20<4DE35A02.6000406@eskk.nu>|In-Repl y-To:=20<4DE35A02.6000406@eskk.nu>|X-Enigmail-Version:=201.1.1|Ope nPGP:=20id=3D60AE908C|Content-Type:=20multipart/signed=3B=20micalg =3Dpgp-sha1=3B=0D=0A=20protocol=3D"application/pgp-signature"=3B=0 D=0A=20boundary=3D"------------enigED7583C18B1358FD368490BD"; b=bBIDx1+3re8Oh/yBCA1G3PsKIuYCfIlD+iqjOxQZiP42vXPVRiwXfOyr4kP7ZWdOV Pnzn8ijVZERmsSUHhRPBBqUUiWIb+be+Oocp/8WpFzKqBiGAgz1+AHXCXgzhs115Wg rarFA0azAfl5c5/T1eQryrwZZwoihVlnQgYSbwuA= X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host seedling.black-earth.co.uk [81.187.76.163] claimed to be seedling.local Message-ID: <4DE36CBF.6060602@infracaninophile.co.uk> Date: Mon, 30 May 2011 11:09:03 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <4DE35A02.6000406@eskk.nu> In-Reply-To: <4DE35A02.6000406@eskk.nu> X-Enigmail-Version: 1.1.1 OpenPGP: id=60AE908C Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigED7583C18B1358FD368490BD" X-Virus-Scanned: clamav-milter 0.97 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_FAIL autolearn=no version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on lucid-nonsense.infracaninophile.co.uk Subject: Re: After freebsd-update.... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 May 2011 10:09:22 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigED7583C18B1358FD368490BD Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 30/05/2011 09:49, Leslie Jensen wrote: >=20 > My system still is shows #0 >=20 > 8.2-RELEASE #0 >=20 >=20 > Following the latest FreeBSD Security Advisory FreeBSD-SA-11:02.bind >=20 > I did >=20 > # freebsd-update fetch > # freebsd-update install >=20 > And a reboot, but my system doesn't indicate the update! >=20 > Any suggestions ? You have applied the update successfully. You won't see any difference in the output from uname(1) because this update when applied via freebsd-update(8) doesn't touch the kernel. It only affects named(8). This is the patched version in 8.2-STABLE: % /usr/sbin/named -v BIND 9.6.-ESV-R4-P1 Since this update doesn't touch the kernel, it isn't necessary to reboot to apply it: simply restart named(8) if you're running it. If you're not running named then the vulnerability addressed by the patch doesn't exist on your server. You should however be concerned about the version of named running on any recursive resolvers listed in /etc/resolv.conf. Even if you aren't running named(8) it's worth applying the update just in case you do later decide to run it. If you had applied the security patches to the source code and recompiled, or had updated to the latest X.Y-STABLE sources, you would have an updated newvers.sh and consequently an updated output from uname(1) -- but this is just bookkeeping and makes no functional difference to the system. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matthew@infracaninophile.co.uk Kent, CT11 9PW --------------enigED7583C18B1358FD368490BD Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3jbMYACgkQ8Mjk52CukIxOqQCfVMtTaAfbJs13FtJHSFyyFAxM i68An2LQsqr+3qMf/uu75RXfd2tcoPRk =rL+3 -----END PGP SIGNATURE----- --------------enigED7583C18B1358FD368490BD--