Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Sep 2025 12:20:39 -0700
From:      Mark Millard <marklmi@yahoo.com>
To:        Colin Percival <cperciva@freebsd.org>, Lexi Winter <ivy@freebsd.org>, FreeBSD-pkgbase@freebsd.org
Cc:        Baptiste Daroussin <bapt@FreeBSD.org>
Subject:   FYI: What pkgbase material is out of date relative to FreeBSD-SA-25:08.openssl and FreeBSD-EN-25:18.freebsd-update
Message-ID:  <960C2E5F-FFF5-4A1B-980E-5FB744F8C2B6@yahoo.com>
References:  <960C2E5F-FFF5-4A1B-980E-5FB744F8C2B6.ref@yahoo.com>

index | next in thread | previous in thread | raw e-mail

> FreeBSD Security Advisories <security-advisories_at_freebsd.org>
> Date: Tue, 30 Sep 2025 16:49:07 UTC 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> =============================================================================
> FreeBSD-SA-25:08.openssl Security Advisory
> The FreeBSD Project
> 
> Topic: Multiple vulnerabilities in OpenSSL
> 
> Category: contrib
> Module: openssl
> Announced: 2025-09-30
> Credits: Stanislav Fort (Aisle Research)
> Affects: All supported versions of FreeBSD.
> Corrected: 2025-09-30 15:26:14 UTC (stable/15, 15.0-ALPHA4)

I do not know the intent for pkgbase update timing
or Announcement content for such notifications.
But, FYI, things look generally out of date for
pkgbase at this point:

(I'll mostly list aarch64 as the examples, but
not exclusively.)

https://pkg.freebsd.org/FreeBSD:15:amd64/base_latest/

has not been updating, the most recent timestamp shown
is: 2025-Sep-26 20:27

aarch64 and armv7 have been updating but do not yet
cover the time mentioned, for example, for
aarch64:

https://pkg.freebsd.org/FreeBSD:15:aarch64/

shows: 2025-Sep-30 09:51

https://pkg.freebsd.org/FreeBSD:15:armv7/base_latest/

shows: 2025-Sep-30 09:42

> 2025-09-30 15:28:38 UTC (stable/14, 14.3-STABLE)

https://pkg.freebsd.org/FreeBSD:14:aarch64/base_latest/

shows: 2025-Sep-25 21:55

> 2025-09-30 15:37:16 UTC (releng/14.3, 14.3-RELEASE-p4)

https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_3/

shows: 2025-Sep-16 20:40

> 2025-09-30 15:37:25 UTC (releng/14.2, 14.2-RELEASE-p7)
> . . .

https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_2/

shows: 2025-Sep-16 18:24

> FreeBSD Errata Notices <errata-notices_at_freebsd.org>
> Date: Tue, 30 Sep 2025 16:48:33 UTC 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> =============================================================================
> FreeBSD-EN-25:18.freebsd-update Errata Notice
> The FreeBSD Project
> 
> Topic: freebsd-update(8) installs libraries in incorrect order
> 
> Category: core
> Module: freebsd-update
> Announced: 2025-09-30
> Credits: Graham Perrin
> Affects: All supported versions of FreeBSD.
> Corrected: 2025-09-25 19:26:37 UTC (stable/15, 15.0-ALPHA4)

Looks like this one is covered (see above). The others
below look to not be covered yet.

> 2025-09-25 19:27:06 UTC (stable/14, 14.3-STABLE)

https://pkg.freebsd.org/FreeBSD:14:aarch64/base_latest/

shows: 2025-Sep-25 21:55

> 2025-09-30 15:37:15 UTC (releng/14.3, 14.3-RELEASE-p4)

https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_3/

shows: 2025-Sep-16 20:40

> 2025-09-30 15:37:24 UTC (releng/14.2, 14.2-RELEASE-p7)

https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_2/

shows: 2025-Sep-16 18:24


===
Mark Millard
marklmi at yahoo.com



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?960C2E5F-FFF5-4A1B-980E-5FB744F8C2B6>