From owner-freebsd-stable@freebsd.org Tue Mar 30 14:40:43 2021 Return-Path: Delivered-To: freebsd-stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 61C80578B66 for ; Tue, 30 Mar 2021 14:40:43 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from wout5-smtp.messagingengine.com (wout5-smtp.messagingengine.com [64.147.123.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4F8sZ26Gy8z4pbt for ; Tue, 30 Mar 2021 14:40:42 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id 2F657247E for ; Tue, 30 Mar 2021 10:40:41 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute1.internal (MEProxy); Tue, 30 Mar 2021 10:40:41 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm2; bh=T1mZoBWyTbkqa4WU8TgEoi/o39H L85mIUcbbGEDf3pY=; b=Z+CF+G06AUtFVdiHpMoTZiNfNnhsxRAO9raxthM42uP yKjFur3WWdChJiOqbZn9Ghj02MHQwL+MlgY9l9iGNixVvyWkeQ02tu0mYV0N80GR /dxKka74VdMzXcdXKFTO7cdiRxoH8Vr5hljiIJFZm9XEAzF3I80+8drhy6tIwiuE 0XPI5NEZF5K93FiyU4VMB+TphBz2cyxn3wVNo3I3GEz1ikCl9xdT2cQ3bWVWdPRU DHNUzo07aHLLGMfckLbDaibI1qHxEVji8tOTxnp29O0yJZBKzLUMLjGXXOZEaT7r f6uL7v7bZPSZKGMZvuWLmCgtUr3hrkguFQbBtjC2/kw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=T1mZoB WyTbkqa4WU8TgEoi/o39HL85mIUcbbGEDf3pY=; b=k4L+al0QDJQEjsc+5FLCGl VB54P/6X7ezRiBxGOQ0U0Lf8fV30q7UTZw/+Sdc72cW6MJeAVrXvVoIi4ZBb+hmp jj9XZLhRaAt+Y4EdE2f2p6cmzTWGzL8738xOdp3UThzmA8IZYe/epczo5BFyyGOc 8jI5lPhxBkuZDrXTLyA01miOc3evTVXvdJcBdN/mo6ZttA2lWBGsjMGVTjW1IsOp ZVl9tX82V5SunTfoSCZ5PbDUEi0j9HaoszdvXKSVbEmOAJtval8s/hWmHqck/t2P HBtkexJUmqsdWdeEV5QyEHan+j54+5upa0J9C2kmRnFvD74ENXF4OOqCO7EL+qvQ == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudeitddgkedtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpeettddtudeugfeggefhkeekteekje elfeffleehjeffgffftdeffedtjeegueeiffenucffohhmrghinhepfhhrvggvsghsugdr ohhrghenucfkphepkeelrddugeehrddutddtrddufeelnecuvehluhhsthgvrhfuihiivg eptdenucfrrghrrghmpehmrghilhhfrhhomhepthgvtghhqdhlihhsthhsseiihiigshht rdhnvght X-ME-Proxy: Received: from cloud.zyxst.net (v007.zyxst.net [89.145.100.139]) by mail.messagingengine.com (Postfix) with ESMTPA id 58A501080063 for ; Tue, 30 Mar 2021 10:40:40 -0400 (EDT) Date: Tue, 30 Mar 2021 15:40:39 +0100 From: tech-lists To: freebsd-stable@freebsd.org Subject: Re: possibly silly question regarding freebsd-update Message-ID: Mail-Followup-To: freebsd-stable@freebsd.org References: <6c3da6ff-d102-b2d9-5433-4dac4116d27f@osfux.nl> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="+lfPHzmo8QP/5gQ8" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4F8sZ26Gy8z4pbt X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm2 header.b=Z+CF+G06; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=k4L+al0Q; dmarc=none; spf=pass (mx1.freebsd.org: domain of tech-lists@zyxst.net designates 64.147.123.21 as permitted sender) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-3.70 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm2,messagingengine.com:s=fm2]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; RWL_MAILSPIKE_VERYGOOD(0.00)[64.147.123.21:from]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:64.147.123.21]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-stable@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[4]; DMARC_NA(0.00)[zyxst.net]; NEURAL_SPAM_SHORT(1.00)[1.000]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; MAILMAN_DEST(0.00)[freebsd-stable]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.21:from] X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Mar 2021 14:40:43 -0000 --+lfPHzmo8QP/5gQ8 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 30, 2021 at 09:14:56AM -0500, Doug McIntyre wrote: >Like the patch referenced in the SA. >https://security.FreeBSD.org/patches/SA-21:07/openssl-12.patch > >Again, it seems like confusion over what happens in RELEASE, STABLE and CU= RRENT.. Hi, I'm not sure what you mean by this. In https://lists.freebsd.org/pipermail/freebsd-security/2021-March/010380.html it says > 1) To update your vulnerable system via a binary patch: > Systems running a RELEASE version of FreeBSD on the i386 or amd64 > platforms can be updated via the freebsd-update(8) utility: > # freebsd-update fetch > # freebsd-update install > # which I did. If openssl updated, would it not be logical to expect openssl version information to indicate it had in fact been updated? If not, then how am I able to tell that it has updated? On an un-upgraded 12.2-p4 system *and* on an upgraded one, openssl version reports 1.1.1h-freebsd --=20 J. --+lfPHzmo8QP/5gQ8 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmBjOGcACgkQs8o7QhFz NAUJMw//QnXd5ywFe9F97lNnZ9XhmqKnyIskvEv9htyuhGqDBnSkt39JFwoOWp/C Cj69P2umI5lhh1k/aTn+Jb4i0ktndCz8jZbizvIEJehCVGPdAnoT/WDUzMXE6eJb QMNpkkrrQzRAx6V8BVgVsX/MJqpT2BS6EpP8RMQ7i8f4uBqhY/pE5TN94O+I4PBV r77ujC6zq6wR2zngOfCHhikl0bk61wpyt73xLjYK8bvZow+oBU7veiPCDlkKGTss OKIIi9ZbkU1STqvCwq3wd8aYAE+aOopCqxonGmWo7g0D1+kAGDKscvpKL7illZkj SaGGUjHkQmCAXVUCrdmrgrGDwf6RNBM/jjNC7vQkM9/uCCR2Aleubszd5WzIzI1S WLFx9j6NJPYAF0AX9/aS9b/AUMAW7GU/SRd+GXbv8zdfcv/PJzd7f62MEh8H2k9d cuN1JjcWMlOuU0WmLSZD6WClD74ol71QIAaBdh3O3glCFJ8k3D3deaV9C2kXADJZ /auZsNLa/cax9dPSqMlUQ0hsJNTsDoiYMcEOxM2DvbgQHTN8hWL9DACb8qpYQNvv ABNdVWUT18nw860c4JYjTiC2q9zVJXiSFt7EteG/S9ntCv+hw3QEIiR5Okt6iM0V HiJhZPiCDPI6DPbtWSzK8rcasCGpZHdhs8b/tM3hMAks2PPICD0= =c/mm -----END PGP SIGNATURE----- --+lfPHzmo8QP/5gQ8--