From nobody Tue Sep 30 19:20:39 2025 X-Original-To: freebsd-pkgbase@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cbnwD5Vdsz697P2 for ; Tue, 30 Sep 2025 19:21:00 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic311-24.consmr.mail.gq1.yahoo.com (sonic311-24.consmr.mail.gq1.yahoo.com [98.137.65.205]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4cbnwD3SrVz3VsK for ; Tue, 30 Sep 2025 19:21:00 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=XAYM4emC; dmarc=pass (policy=reject) header.from=yahoo.com; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.65.205 as permitted sender) smtp.mailfrom=marklmi@yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1759260054; bh=Zxts9MZvIoKS5gg7fckrXvZDgDTi+/tyWCtJmyLMXMs=; h=From:Subject:Date:Cc:To:References:From:Subject:Reply-To; b=XAYM4emCT5N/2jzR0Br3ix33JD0ApFys/yTrJk1GWJB9yAjAlSE0biEpcIstvkn5AZqDHcJzTMnaCnyj6eAFCJGcMpPi5XodirrkQXHSFWJ1BLbVb3sI/OXZtvJC8AHG2qI66cpDVC6Ib+nhaMtDuwIbbaNZVIycCEeKrCH0oy9dItSBMXSH4GCVE1YoHnEMJZLM9fUflkzOd3CbBksZPPyFEPho0RY+gPTfjsXveUDg8uON69mTaQTQ5+BZ6xEYWNhXaB/grD5o02yaub4ITSObJd83mWc8JR579I2+alc64OQRre7T4dnVq/oJW0Z1+uG7TVIPBpYTa3vW8JLrvg== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1759260054; bh=b3yoryzk9l8ehs05L9uQiJknMy44scK74x5u8lkdkcS=; h=X-Sonic-MF:From:Subject:Date:To:From:Subject; b=BHNlmlO0P7W7XGpk4/m7hnL2qMZOQtag2575gG+fnOFNKa/5CeuXZ6rDBt4/iDZHVqVbh7yPjDPBvXmzcG5vKJ0YxTU75HGZVlutohH2GP/YVstVMMtS0aXqEMcTeJN3e5I1ck91O2yhRa2oOZYrxceIRDCDN0aLgMrkVNMFio+qyzwmMhnulEDe4upY0kR3V0z0d1s17OPCSxUh8sx3q3pNUscZuM8Q5Pj2KiQyTVmL4c9spN8fF/9VJrBo0UhssnFlBTSI0ymrjuN9fO5Rr0sYd0nKZfsSLNbJYSq0ka7/HC2Fgwn3d6V2pCJpVKxIdBXcNJ55QAJ6Gr64H8rqDw== X-YMail-OSG: MtAqFc8VM1lDJnGcwMHyamNQvoe_5uHed9iHhEXHEMYlHCli_E.HI4SUVeYlRvH NqkA8dax6f_fhOv.gpUWGUulSgxkctiaphTOodBPN2peCXAWMFr2svdAhkPWQVkVG2UWHUYEfUdd VnrkjwlRzBJCSZLtYN0_xgOsufhDDbGjPMKEVQZrVlGBwXc2K2TgcKmQwssHr3PohODPGG3kugh9 dSE6NglFo_VfrFb5v1llfM3_HcDQH1rDoZWKbKpV7mE3kROGoGDAQ_vCxeTbhM3CtqtzK5F5KaNv tkYSXxFfJG4bzSqSwJsWoG.1QVptmQprPr78yCIdPWPxip4yi5EUTA4pv.fPWK.AuevmfAB70A8B kyOb69GLzaJc5as_VuecWvFadOfUMl4.Vayfpd_7BJCCgON0pzGDLTyWuhc4gzvziOX3U5S9_JqO u1alr9abrojgM5pRruKMVOp_RpNM7irbn12navxyXkqUyVfyEcfLHRgGpYNFwaN9ycBdQCHoehOi RkgRL_p74DkjCZkIHzgvOxzn.gy1TCmTR1pcaye5jGD7wEASg7u2Cmfg72Ilnxkx2ZD4h1JpwYMq dG7R.y0jlkHMA1D35UpMgUPCE_kaqzExjfuQeqilMgS5_eKYJG2LcdLTOTsOZ3i6jWAqHNTMLH4s 36wjjC4svyKgEOOp_S_87khMj7b6qFjf6AdTBAcmHoW9EkxFNzsBsiPZwuhHF.pgZrOGliJE8P.q z_OEfO73xZBXYGJQBQuijhwnjLQPYuk7a9lWI.kv6m696QEMaXoV9CggWVmf4WcK4kQ_HxiCcKOg ni2qui7nUPZDi_qGetUwppVnaNWrBJ5QXqIhjkQWa65dec4uWy_wwGTwCHwCvCSQLYDKtsPgMJxC JgO7tRhch8jdujqNZuIlhzKM.uNKKUY4Ez0XRAmTMeWiDBe8nWKoZvghrfLKaaLh9GAQA4B68pt2 hHR7FPGyPVmUgQgdkIy4dH4.MDi6JmRI4FNc8MacAKDZEbkisfsiwjXcXazcaxrYVh8tX2MOWYEX 8Nfd2pqoJBwbfhrEnzxEDOBjwqn92zAaVPkqRCic.j3u3ie8hoHED6KI2EsHwih55bdcj52OoN4P SpB7O1DyqO3cwGH4_gjyTN1SQwF782Xr7kzs_YwQrCy9wM5KJk64vTWQTh8RmZWqIXNjuC4VqHOb lkzmnTt_8wrPkmmn3pMHoi1_1ho3VM.0sVYU4bNwMOXrpZrX1OLWqQtKovyXV8zLt_UTMeMsSCeM Jb7uRD7h.gUarCrhFXa4gP9id7W6PV3ofPXwlJcuCtWyMBuoRdOJckNV0GT_tUgUzvxWbzbtLVzH 1Se85D8Koo8fw9rJDf6WiCGgOv1.hn5wJ9CCubo7dXYqbUL3V_Z_7iUAmi.trlVVZ5sdtWFkcfyc zRKtDMhAtqW6Imgl53etpM7NY.dOE0B6vPQrf6Xwf.uaeQl4m6nQXke2sxz2Q7rdea4gySz6PgBp ywOsxowM03jlaeyfWGXFdhVl3AzjbeLwU1T3aNkX84PEm.g1c9kDMvMDbLhn8eOlH5lsiq6NOjF_ 3WtW5J4GB0QfnyAKq2CjrwnSJ8cdjsPZe1pBof311inn6EgvVydUMN9UFTLnUNmrt0HxheKi9j7K mDmDqgiT2bRP2hgU8eNPN9pX_rY2MLAndhueqcrmQ4G3nBNbAtI5hcgHzLDcxK6E3fizuYI7JcIX b9EgJpKYbw60BiH8bG0x9nTYVxIzm9327fuixsZiXXU64Z5C8Fo3s0bxVODf.uuLW X-Sonic-MF: X-Sonic-ID: 817d3d1c-09f4-49df-9b31-8bdb9a7d62f0 Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.gq1.yahoo.com with HTTP; Tue, 30 Sep 2025 19:20:54 +0000 Received: by hermes--production-gq1-66b66ffd5-gdrjw (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 0bdde0d4f0bc110903ecb7583a50a985; Tue, 30 Sep 2025 19:20:49 +0000 (UTC) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable List-Id: Packaging the FreeBSD base system List-Archive: https://lists.freebsd.org/archives/freebsd-pkgbase List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkgbase@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\)) Subject: FYI: What pkgbase material is out of date relative to FreeBSD-SA-25:08.openssl and FreeBSD-EN-25:18.freebsd-update Message-Id: <960C2E5F-FFF5-4A1B-980E-5FB744F8C2B6@yahoo.com> Date: Tue, 30 Sep 2025 12:20:39 -0700 Cc: Baptiste Daroussin To: Colin Percival , Lexi Winter , FreeBSD-pkgbase@freebsd.org X-Mailer: Apple Mail (2.3826.700.81) References: <960C2E5F-FFF5-4A1B-980E-5FB744F8C2B6.ref@yahoo.com> X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.98 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.98)[-0.980]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; MIME_GOOD(-0.10)[text/plain]; FROM_HAS_DN(0.00)[]; DKIM_TRACE(0.00)[yahoo.com:+]; RCVD_TLS_LAST(0.00)[]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim]; FREEMAIL_FROM(0.00)[yahoo.com]; RCPT_COUNT_THREE(0.00)[4]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; MLMMJ_DEST(0.00)[FreeBSD-pkgbase@freebsd.org]; APPLE_MAILER_COMMON(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.65.205:from]; RCVD_IN_DNSWL_NONE(0.00)[98.137.65.205:from] X-Rspamd-Queue-Id: 4cbnwD3SrVz3VsK > FreeBSD Security Advisories > Date: Tue, 30 Sep 2025 16:49:07 UTC=20 > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D > FreeBSD-SA-25:08.openssl Security Advisory > The FreeBSD Project >=20 > Topic: Multiple vulnerabilities in OpenSSL >=20 > Category: contrib > Module: openssl > Announced: 2025-09-30 > Credits: Stanislav Fort (Aisle Research) > Affects: All supported versions of FreeBSD. > Corrected: 2025-09-30 15:26:14 UTC (stable/15, 15.0-ALPHA4) I do not know the intent for pkgbase update timing or Announcement content for such notifications. But, FYI, things look generally out of date for pkgbase at this point: (I'll mostly list aarch64 as the examples, but not exclusively.) https://pkg.freebsd.org/FreeBSD:15:amd64/base_latest/ has not been updating, the most recent timestamp shown is: 2025-Sep-26 20:27 aarch64 and armv7 have been updating but do not yet cover the time mentioned, for example, for aarch64: https://pkg.freebsd.org/FreeBSD:15:aarch64/ shows: 2025-Sep-30 09:51 https://pkg.freebsd.org/FreeBSD:15:armv7/base_latest/ shows: 2025-Sep-30 09:42 > 2025-09-30 15:28:38 UTC (stable/14, 14.3-STABLE) https://pkg.freebsd.org/FreeBSD:14:aarch64/base_latest/ shows: 2025-Sep-25 21:55 > 2025-09-30 15:37:16 UTC (releng/14.3, 14.3-RELEASE-p4) https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_3/ shows: 2025-Sep-16 20:40 > 2025-09-30 15:37:25 UTC (releng/14.2, 14.2-RELEASE-p7) > . . . https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_2/ shows: 2025-Sep-16 18:24 > FreeBSD Errata Notices > Date: Tue, 30 Sep 2025 16:48:33 UTC=20 > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D > FreeBSD-EN-25:18.freebsd-update Errata Notice > The FreeBSD Project >=20 > Topic: freebsd-update(8) installs libraries in incorrect order >=20 > Category: core > Module: freebsd-update > Announced: 2025-09-30 > Credits: Graham Perrin > Affects: All supported versions of FreeBSD. > Corrected: 2025-09-25 19:26:37 UTC (stable/15, 15.0-ALPHA4) Looks like this one is covered (see above). The others below look to not be covered yet. > 2025-09-25 19:27:06 UTC (stable/14, 14.3-STABLE) https://pkg.freebsd.org/FreeBSD:14:aarch64/base_latest/ shows: 2025-Sep-25 21:55 > 2025-09-30 15:37:15 UTC (releng/14.3, 14.3-RELEASE-p4) https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_3/ shows: 2025-Sep-16 20:40 > 2025-09-30 15:37:24 UTC (releng/14.2, 14.2-RELEASE-p7) https://pkg.freebsd.org/FreeBSD:14:aarch64/base_release_2/ shows: 2025-Sep-16 18:24 =3D=3D=3D Mark Millard marklmi at yahoo.com