Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Mar 2021 16:38:57 +0100
From:      tech-lists <tech-lists@zyxst.net>
To:        freebsd-stable@freebsd.org
Subject:   Re: possibly silly question regarding freebsd-update
Message-ID:  <YGNGEcgvn2OSyQrG@cloud.zyxst.net>
In-Reply-To: <aad6ecc5-f6b0-92c5-1acb-e9666760e813@madpilot.net>
References:  <YGMpE5uWvRy8Xdql@cloud.zyxst.net> <aad6ecc5-f6b0-92c5-1acb-e9666760e813@madpilot.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--86sTB+i6CEzL6SKD
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Mar 30, 2021 at 05:22:30PM +0200, Guido Falsi via freebsd-stable wr=
ote:
>
>No, as you can see in the commit in the official git [1] while for
>current and stable the new upstream version of openssl was imported for
>the release the fix was applied without importing the new release and
>without changing the reported version of the library.
>
>So with 12.2p5 you do get the fix but don't get a new version of the
>library.
>
>
>[1]
>https://cgit.freebsd.org/src/commit/?h=3Dreleng/12.2&id=3Daf61348d61f51a88=
b438d41c3c91b56b2b65ed9b

On this url, near the top, there's this:

"Fix multiple OpenSSL vulnerabilities. Add UPDATING and bump
version." next to that, we have "releng/12.2".

So, I'm expecting the version information pertaining to=20
opensslto be bumped. Is this expectation unreasonable?=20
I'm not a developer.

--=20
J.

--86sTB+i6CEzL6SKD
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=/U6y
-----END PGP SIGNATURE-----

--86sTB+i6CEzL6SKD--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YGNGEcgvn2OSyQrG>