From owner-freebsd-hackers@freebsd.org Thu Jul 9 22:55:53 2020 Return-Path: Delivered-To: freebsd-hackers@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C7358358B90 for ; Thu, 9 Jul 2020 22:55:53 +0000 (UTC) (envelope-from leres@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4B2s3F4ty7z3Wfc; Thu, 9 Jul 2020 22:55:53 +0000 (UTC) (envelope-from leres@freebsd.org) Received: from ice.alameda.xse.com (unknown [IPv6:2600:1700:a570:11f0:f2ad:4eff:fe0b:a065]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) (Authenticated sender: leres) by smtp.freebsd.org (Postfix) with ESMTPSA id 4615125D5C; Thu, 9 Jul 2020 22:55:53 +0000 (UTC) (envelope-from leres@freebsd.org) Subject: Re: FreeBSD Security Advisory FreeBSD-SA-20:19.unbound To: Gordon Tetlow References: <20200708210700.280D517D45@freefall.freebsd.org> Cc: "freebsd-hackers@freebsd.org" From: Craig Leres Message-ID: Date: Thu, 9 Jul 2020 15:55:52 -0700 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jul 2020 22:55:53 -0000 On 2020-07-09 11:37, Gordon Tetlow wrote: > I would give that a try. Those files are part of the "base-dbg" > package. Are you expecting that to be installed on this host? That's helpful. freebsd-update.conf has: Components src world without kernel because I always build custom. Does that imply base-dbg? I'm pretty sure I didn't select base-dbg when I installed this system. Can I fix this by changing my Components line. Maybe this? Components src/src world/base I looked at freebsd-update, the related man pages and the FreeBSD handbook and don't see a comprehensive list of components. I just tried running this: zinc 55 # freebsd-update -r 12.1-RELEASE upgrade Looking up update5.freebsd.org mirrors... none found. Fetching metadata signature for 11.3-RELEASE from update5.freebsd.org... done. Fetching metadata index... done. Fetching 1 metadata patches. done. Applying metadata patches... done. Inspecting system... done. The following components of FreeBSD seem to be installed: src/src world/base The following components of FreeBSD do not seem to be installed: world/base-dbg world/doc world/lib32 world/lib32-dbg Does this look reasonable (y/n)? ^C It doesn't appear to be that freebsd-update believes I have world/base-dbg installed? > Note, I hope you are using "freebsd-update cron" in your cron. I run it in a wrapper script that only sends email when the output changes but essentially I'm doing this: sleep `jot -r 1 0 3600` ; freebsd-update --not-running-from-cron fetch So the same load balancing. Craig