From owner-freebsd-security@FreeBSD.ORG Wed Apr 30 19:52:05 2014 Return-Path: Delivered-To: freebsd-security@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B1D5B371; Wed, 30 Apr 2014 19:52:05 +0000 (UTC) Received: from anubis.delphij.net (anubis.delphij.net [64.62.153.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "anubis.delphij.net", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4DC5E1FDA; Wed, 30 Apr 2014 19:52:05 +0000 (UTC) Received: from zeta.ixsystems.com (unknown [69.198.165.132]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by anubis.delphij.net (Postfix) with ESMTPSA id 75BF11BA89; Wed, 30 Apr 2014 12:52:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delphij.net; s=anubis; t=1398887524; bh=FX0fs2Fwv3MtU2LAkpAh61oSz/igcJIl/TaGF4jdF98=; h=Date:From:Reply-To:To:CC:Subject:References:In-Reply-To; b=Be8s6hD/a7huP8vpeJDGRHoOtLgxVgTD+w53OelsrvSPFYXFaey0V9Xs8B8V5nBRd sV2ACRFbx6r5V59OOD5qnNG/Y8akTu/X80kFZy9pCcVAjz1T1GUp5cqFkWfazs7I66 zfNcC0wd1IN2KWQ4AHU8dPRRs6T5hljR3FQzB+sQ= Message-ID: <53615462.10805@delphij.net> Date: Wed, 30 Apr 2014 12:52:02 -0700 From: Xin Li Organization: The FreeBSD Project MIME-Version: 1.0 To: olli hauer , freebsd-security@FreeBSD.ORG Subject: Re: FreeBSD Security Advisory FreeBSD-SA-14:09.openssl [REVISED] References: <201404301906.s3UJ6UCV017100@freefall.freebsd.org> <53614E7C.2040703@gmx.de> In-Reply-To: <53614E7C.2040703@gmx.de> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Xin LI , Colin Percival X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: d@delphij.net List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2014 19:52:05 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 04/30/14 12:26, olli hauer wrote: > Hi Xin LI, > > I've seen a strange behavior on 8.4, 9.2 and 10 systems. > > After fetching, installing the update + reboot a second > freebsd-update will always pulls the following files > /boot/GENERIC/linker.hints /boot/kernel/linker.hints Wow that's not normal. I can reproduce this on 9.2 but not 10.0 system (note that despite it claims to have patched the file, the sha256 checksum remains the same). Colin, do you have any suggestions? Cheers, - -- Xin LI https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQIcBAEBCgAGBQJTYVRiAAoJEJW2GBstM+nslSIP+QFT6j2/qsaGJX8kC0QCzsIi 5YXkorbiV7pSEwEGXoS3gWeKwh9JaIT04VsXntENx26NJPHbWS3crOGPMOZ5/NXW kpXBB4LIS/6avloiOGDS/k0jk/I/eAIZaJuwtij/WoWoRrd9StpfxS83VHXra70P boQ843lwrTlnFMKwjn0cCg9R7QHjFWM00PCOgHUwVwPu4tSqm0yNpYpRVRRT0jkh pjEzOFPgve5LiV18P5Ey7FgkYiNKEXRQKOTqtW0W1/6ELDHorZNj06Fs/r/LKgEu v2nbJlV8gmdh44SItx2EFyaCFi3sczdfKcJzDVTNKn3C4z6S26tYPADJTEReaWAi 6uCFVKLgrPasJZNOvOyD4xhjQ5W4LGH6oRzGXpfguue9cfqFgw3YOrbVoueSLpZw Y6v6sTbzETicQNzdfUS1Dk4pAqGMqVMIE9tFNGCOQfzEseNp++sea/WwwfOnYy7d nvP6P7XN4w3cqPqYGyvgpL3ECLBJn2BOAxvC12tgrc32zUe7CEUVbu/sb58r41qF eKY65qW2F5EL/V7P6jfeGE9Dv3U46QC1YAgExj9AhtzUswGl1bJetJR+m7FD1Uo7 XUbsEFItvhLYeFRUggL3A10cTaFKLhrtmjNjeSb+u6ZXXcqWqZyUply9jEWjnhXU 13l3CDaks9YNPIMLJ2U8 =ILmh -----END PGP SIGNATURE-----