From nobody Wed Sep 4 13:27:46 2024 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WzNbG032Mz5Tv5v for ; Wed, 04 Sep 2024 13:27:54 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from CH1PR09CU001.outbound.protection.outlook.com (mail-northcentralusazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c105::3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WzNbD4cDwz40G7 for ; Wed, 4 Sep 2024 13:27:52 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=redcom.com header.s=selector1 header.b="baC6n/BP"; dmarc=pass (policy=none) header.from=redcom.com; spf=pass (mx1.freebsd.org: domain of stephen.wall@redcom.com designates 2a01:111:f403:c105::3 as permitted sender) smtp.mailfrom=stephen.wall@redcom.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=D3/9j9BElaRhFcVpasG133G8LQPvnuvKG/OVoO+PMwymDoeuSH+gt57Sl7a1qKdc//DM/3LJtbSyFd1lk8o0L3KmJvi2VfnPwRFTXtI2Toe95RDxfbhHzLANaoUOEHT8bZRPZFKs4Zu9aXcKhVlTPybgguU8cJ0QknpmSesBTYXNyK0yh6Diu0PsOQDY1ZjaFg953KBohzyeBjplVkExHBK8ClUOY0gtZuyGDCm7tejNYNuvKtLZaj6BEipMnByhO4eY/8vgjXjOme8oyt4/nckx5okdyrONTosmEwrIc5U099qOlorBT6ic2W5/CWscItc5uKMAf7qd/88iSOC4aw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9NZM87f51/4Vjq1KgoC2eBbmaQreDBe9PPFMm8yezuQ=; b=xudzVYfe2xOvbs4cbALDxgYNLajLhEcSkcS7QlkWhL/+jLQxiZF36fxxcGdJ1ulhOhBf6kWmAS9ohGE3lTmg5obA9OYHfCXUx4Bt9GXyFN+ccA0Ht7NDxEjoN6tQpSZNjy6fVCGjNy1aXfIPdj5VSqLbVDwCUkjFxoCARWuOg4AtY76Sg0v5O4qBF+RDepLkTFtWkzEMyFjN/Ucc8Plp+pLQqDDYHnBKxU9VXoMIoOiUAKjPiF1vXa0IH9TD+JIhrpv8U22HeBy0g407YB2sR4Z5B4XFaylHrX8eONUz85ZwA9dIpzTNqKFZaW+8WZiJPzqWdagNzbtG4tGfk4j0KQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcom.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9NZM87f51/4Vjq1KgoC2eBbmaQreDBe9PPFMm8yezuQ=; b=baC6n/BPHMlpjEHXM1R8SJ3GRc5v27UfWxM+09gWJwjw72gzL9dycGj88c5hlswrBGkVKjEHzGaBbJJdoNjg9oDkIgXv6RMj+ZwOzI1nWkhKxYbYsfwlsf6PsndzaDfoHeD/Epaud1t3hNRCTTonF2zZIrk72xnlJoYpzihqpubD/qB5VOrQJrI72+rybNFeb7gV8qYBS7JgnWkScOm9OWfHt5eND0YXuP5VT2hxioCjIqJ/b6I94wwBDHn/S7gppqmUGGHmVPJJdn7K0oFn2tyR+OhlIhRZ2g4gLkWkh4uQrnd3hpdqdQcNQwwg9J4gSJaqN4WzQv6XC8ng7956lQ== Received: from MW4PR09MB9284.namprd09.prod.outlook.com (2603:10b6:303:1f2::12) by PH8PR09MB9072.namprd09.prod.outlook.com (2603:10b6:510:17e::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7918.27; Wed, 4 Sep 2024 13:27:47 +0000 Received: from MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e]) by MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e%7]) with mapi id 15.20.7918.024; Wed, 4 Sep 2024 13:27:46 +0000 From: "Wall, Stephen" To: "freebsd-security@freebsd.org" Subject: RE: OpenSSL Security Advisory (fwd) Thread-Topic: OpenSSL Security Advisory (fwd) Thread-Index: AQHa/hl4zV56ZljFdUy36M2b7qJch7JHnKeg Date: Wed, 4 Sep 2024 13:27:46 +0000 Message-ID: References: <20240903155326.C282E207@slippy.cwsent.com> In-Reply-To: <20240903155326.C282E207@slippy.cwsent.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MW4PR09MB9284:EE_|PH8PR09MB9072:EE_ x-ms-office365-filtering-correlation-id: 4272724d-5fc8-4bb6-e16b-08dccce55d79 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|41320700013|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?OEtBVXlqMysvalcwaTRXQUpORitlZERQRGtzWXlHVGNrZk1zcFZVY0t1bWdz?= =?utf-8?B?QjRSL1ZNNUlQVlZLNFBRdDNBOFZqdWx2VGNxVmtSMzF2RHdjaExHYzNnRk1K?= =?utf-8?B?WjlxRlVyVU90TktlUVJUTHQrZ3IyNlZqcWtqclNRYXRjVU52YTJHdHFZZUFM?= =?utf-8?B?blNUOEZFSk8ra1NrYzV4clkvdWxTaFlENE9US3RLOW4xT1pKNzJxLzBzd1pG?= =?utf-8?B?c1hhTjRBQUhSY3JBMU03RjcwOURxQ1U2bkVGVmFGS1RzVE5xaUJXME8wSklv?= =?utf-8?B?QXBqeVNoRlBDRUNvbEZSZmFNSm9QZHFMTm5FcHpEeXg3NjUxempCWnZNRWl1?= =?utf-8?B?eWRpUWpKRWJBQUd6cURsSGF3RjZFRCtuZmJ6SmdKSTZhTDNodTR0aTNLRUtG?= =?utf-8?B?d1g1OFYvZERMTXVDVHgybzhEZXIxaWE3ai9DR1MvemR3a0pHNUMxWnA3SWtE?= =?utf-8?B?bGk3VFVsN0VoWXJ3VGRWS1hQbjFpa2VUTkpNcytNMDBxN2ZhN0hxMlRmSWVR?= =?utf-8?B?NHVoYmZHSlJvRUJWTWhFbTVlSmR4OEdrRTY4VU9JUXRxSTVEbDZMS2F2RGFB?= =?utf-8?B?M3ZzZVJpZzV5ZEx1TnE1RVdRMmFmMGNNVUxicG1NTEwrUitBUGIzMmQwUVJZ?= =?utf-8?B?Ui9yWFB4eFV3RldjTUFVdmdVbUpBMjVqbVQwNGM5a2dXNlZxTkJxSzJPbnB0?= =?utf-8?B?bVRrcUs4bG1zUSt0U3hHMU9id0RyNDBpdisvQ0VBM0NYZFpkcW5rY0crQ1NE?= =?utf-8?B?aHZPV2VNOElsbnBsWWc1ZitJRWgvdkk2NmlZT3hhdms4ZFlNbVBJdHIwWVdl?= =?utf-8?B?YkQyblhaN2F2b3RUaGxvTnlEUHQ4RGtYUzgrbUZUTzdrMUpsZG9rSDBwY09D?= =?utf-8?B?cVJnck9MSlV2SHlYZmZWbGxDS241cWhGMVFGQVQ5QmZsWTZUVGJ0NTloL0Nz?= =?utf-8?B?UFNSOGxMNTdaSG1hQVhkUHVYOU8xSGZiUWdyMWFqNnU5a0VWTGYrRHhURlMv?= =?utf-8?B?eE9LUW5FdnhjWXZIbmt5YjlUckxBSGdnZkRtVHRLdGVvaTRQcjNrazlTbU9k?= =?utf-8?B?M1BvaWdkWjdIN3JMMEpGeU9mWUVLL1lUdk05V25rZW5vTXpoUmRhZ3RPWmN4?= =?utf-8?B?TTQ5VWIzelZ1TTNnV1NsRG9JeE90ZWt4VSswdlJVOWp1OVdVckVyb1hwQnJI?= =?utf-8?B?OGtISGZLR0lZa2Fiak5sM3c4aXFQaTRFcnpmK3o3RGtiaHk2ak9weUZ3N0FE?= =?utf-8?B?bTl0ZnkwaTRVaGwvb1M3YWZxMVhFaHhzaW9Cd1AwU2FGWUVzemRoUzFidTYy?= =?utf-8?B?YUVSd1hVNUdtOHFrbDdQT1g3NXNJVTUvNXhUcnkrTEZaRkNLb0pGeWtOVitK?= =?utf-8?B?MGErMEpzSVh2SUFlODh1cjQwcG1VY2dYbEdZRTI1MHdaUURKUHhzZWxleWda?= =?utf-8?B?aU9uNXByVGlBNng5dHZHM3hrdVFmcDdKRVJVSkNiNk82SDRITWtPUTVHUitZ?= =?utf-8?B?OC9GU0FXYXI4SFgzbkdJZTMrcWtJZzNMVmIrMUp2SkljYUNGTGNzLzVGamdt?= =?utf-8?B?ak40elNoRlJvL0QwUlRXYmFrUy9nWVh2azhWSTdoaW1XbUZCTWJXRGZySjFK?= =?utf-8?B?NTFGTDFtajNSelh5ZFJOUUlxWDgyMlNWcUVJblo5L0xRZm9iS0liQzN2S1VM?= =?utf-8?B?cmV4TTJWQmEwU0xUMGZBTlBFdFgyUWhHSG80ekU4bkczd2hWVmRwZnpRbjh4?= =?utf-8?B?dnA1MVlvMVltbm8rQUhuK2V6MzUyb1VVQmljU3NGTy8ydTJVb2prY2hwNVlM?= =?utf-8?B?dkpxL3E2N0lpaGVVVXowVmduRUhhbTdVSWtTZklZVDV3NVFPRmdONVByTnFH?= =?utf-8?B?NFY2bVJ0bFhmR0U1Ymg2ZVFmZXJ6RVFQK0IrcjJGNWcxb0E9PQ==?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR09MB9284.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(41320700013)(38070700018);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?bkJSaEVDQVpjY0hFeWpKNzVOSVBQSTZEL200UGx3aFZncFZaTkM2cmVnSE1x?= =?utf-8?B?Zy9BN0pTMFREYm5NV2g4dGtMamFURVBkcEJMWE9kNGdNTVhqeFl6SVd2VEE3?= =?utf-8?B?UzVYd1VUcERTTU1iNnhMYVFQVXFDeFdwWnV2VE9HNGNqK3pRSTZFK3Z0cjRY?= =?utf-8?B?bTdrY3lRMWw1eHhkcE1zZEhPUm5tMnlxZEExRHBnaGRkM0hLU2piYXNsOUxJ?= =?utf-8?B?ajhkcmh4STdDc1cwL3QyR3o1WG1FbjhQTGxrcFBkcUNMK25tVXN0aS9nSWYy?= =?utf-8?B?UEsxUDlQQ1h2U1oxZGhoT3MxcWh5MFpTZmlRd2JZYk1wU25qdVljTDM3UUlS?= =?utf-8?B?bklocmFNSjlDUHIzcWV5OWNJTUdaajExVFhrSkpZNWdUbk9pNnRPNDJPNmYw?= =?utf-8?B?RndlZHZYVk5UVkNPYmwzVGxTRzZocFRJSXVXMWtBWVZBeDliaWpPNmtqSStZ?= =?utf-8?B?bWtLMGdBU1N3N3U2ZlRCcjUrK09nMmJrNmtUTTVtTlJ5eGlxczlobloyYm9N?= =?utf-8?B?RXB5NFpsNVk4RTVoTjIzc2hyc2N3ZlA5MlEwMWVKZTVkT29WZFppc0I0UGVI?= =?utf-8?B?Z0F4NTltd20xbzd4QlltcklRZkdiSE5tL0xzVGk3OGh4OEU4bEpuNEZoU1h5?= =?utf-8?B?dVBoOTJkSnAxYmFncG1xcG8yd2RMM0pkbU5PUGk2MmlYZGVDQWdSang0RHVX?= =?utf-8?B?b20wWEEwZGFlcU9keXZsendXU1FKb1lXUTBibVo2WnNuLzFZL00xTDN3R3k0?= =?utf-8?B?NmpCYjBhQWVabGtSYkpxZ2ttUXJzUmhUTXo0VDl6TEd2dVV5T28ra1d2NFcw?= =?utf-8?B?TmFzYVVDdlhrSEdNc0hiUzBWYmNRS2hERWdwMTFmMnJzWWduY0ZqbXRnVUxW?= =?utf-8?B?aTVDK1NJNEN1TkVZNnNvU2hQM3VWd29oVk9KVmtNd241NG55ZThVMGlxdVVN?= =?utf-8?B?TG9lVUxUbUEzeHIxRm9qeWJYR1R4SVRUZ0dQVXltbGFUWk9mSGh2bnozSVFy?= =?utf-8?B?YUFXNFFwb3RlN2VDRTVrbzR5b3hsUndkdGVUdlB3YTJQMDRlQTBzMmM4UVVj?= =?utf-8?B?V1pkK3pNNzVXNVMzaDNVNDlHdm8yQy9rVEtwOHpKOGxKR0ZsVnNjRk95Q283?= =?utf-8?B?Mk56MGJLQnVPbXY1Z0FEemhFN2FzZ1F6ZUNQcTFnQ2t5Qmw2c1VlWUhxMXlR?= =?utf-8?B?YzFGNitBTWhpRVJjMC9hZ2tMdGtMYXNVN2lvUjlzN1phZkFTeDhTdXdEaDJK?= =?utf-8?B?SHpTTTE2d095MU9ZdVRBVlJ6OXpKbDJBbU9CUzAybzRNcmRWQm4wUVpZZzZq?= =?utf-8?B?RUVCbGNyM2VpVjJEM250YWM5UVV5c0FRQUFaTlhIb2ZaaXJDalA4Ni9peUxK?= =?utf-8?B?ZDdFTWlmTjNDVFBtL3pzVmdjdFA3eHkrRWFqRTNHVXNxV000emxhTVlMK0ds?= =?utf-8?B?elJ6TXVmMVRsUVhsZ2hCKzE1V1ZkVnJhWHJyaTRObFhWaCtJVTBxUWlmMGZ2?= =?utf-8?B?RnllOGlOd2NtTHV5TXBpTWlnemF5bFJreDlxYWJiMWF6SDg4L0lIQ1NkNHd5?= =?utf-8?B?dWtTMm0yT2xCQ1JBWUFwSlFiRVhOZTBtTDVCbndtOW5xazRYQ3J4Z2F2UjEz?= =?utf-8?B?NzBYdXBCYWJSdlBwaXJBWlJiM0xRVTAxQWNIUVh0My9oMlJZRVpCZFhSTlNz?= =?utf-8?B?VkNhazRYdFFWZ3VFK25wL1UyeEdkcitTVzd4OXlHWVBsbFhFViszU2d4SEhW?= =?utf-8?B?NGdDQ3hOOUwzM0ZQNmZMZDNhQ3ZzVFlZT05rVXN0aFlTVjh5eFUzOWxYL3RM?= =?utf-8?B?ZGJEZ0J0Yy82cUN1SW5TQXkxY3FrWEJqN0l4a290KzJQa0p4UXdYN2dLdVNk?= =?utf-8?B?OGlJNGY0eE5keE5vS1BXclZ6NHpBY2dDU1UxSVhPZDgzVzlPYUFLeVNBaTRy?= =?utf-8?B?MFY2NmMyeTlYd0N5VEFML0lxV0lpMVUzUWIzcUVORnkvOHB2MndwNEV5eHNQ?= =?utf-8?B?NnkwMnFBVEFJZld4ZlV4Ymx0QU0zZVFYeEFHSEVidFVSYzJxWW9pb3lRcWZt?= =?utf-8?B?SzR3dTlRbDVkMTBkMHZhY0d3VDZISmgvTDRpQ0VhNUp1Q05IbmdmMHFNZHhk?= =?utf-8?Q?QXeU=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MW4PR09MB9284.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4272724d-5fc8-4bb6-e16b-08dccce55d79 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Sep 2024 13:27:46.7564 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR09MB9072 X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.89 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_BASE64_TEXT_BOGUS(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; NEURAL_HAM_SHORT(-0.99)[-0.995]; DMARC_POLICY_ALLOW(-0.50)[redcom.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[redcom.com:s=selector1]; MIME_BASE64_TEXT(0.10)[]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; TO_DN_EQ_ADDR_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; FROM_HAS_DN(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[redcom.com:+]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; MISSING_XM_UA(0.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c105::3:from] X-Rspamd-Queue-Id: 4WzNbD4cDwz40G7 Pj4gUG9zc2libGUgZGVuaWFsIG9mIHNlcnZpY2UgaW4gWC41MDkgbmFtZSBjaGVja3MgKENWRS0y MDI0LTYxMTkpDQo+IElzIHRoaXMgc29tZXRoaW5nIHdlIG5lZWQgdG8gY29uY2VybiBvdXJzZWx2 ZXMgd2l0aD8NCg0KU2luY2Ugbm8gb25lIGVsc2UgaXMgY2hpbWluZyBpbiwgSSdsbCBwcm92aWRl IG15IGZlZWJsZSB0aG91Z2h0cy4gIEFzIEkgcmVhZCBpdCwgaXQgcHJpbWFyaWx5IGFmZmVjdHMg b3V0Z29pbmcgVExTIGNvbm5lY3Rpb25zLiAgSS5lLiwgY3VybCwgd2dldCwgZXQgYWwsIGFuZCBw b3NzaWJseSAoYW5kIG1vcmUgaW1wb3J0YW50bHkgSU1PKSBhcGFjaGUvbmdpbnggcHJveHlpbmcg dG8gYW5vdGhlciBzZXJ2ZXIuICBTcGVjdWxhdGluZyBoZXJlOiB0aGlzIGNvdWxkIGFmZmVjdCBo aWdoIHZvbHVtZSB3ZWIgc2VydmljZXMgd2hlcmUgc2VjdXJpdHkgaXMgZW5vdWdoIG9mIGEgY29u Y2VybiB0aGF0IHRoZSBvcGVyYXRvcnMgaGF2ZSBlbmFibGVkIGNlcnRpZmljYXRlIG5hbWUgY2hl Y2tzLg0KDQpBcyBhIGNvbW1lcmNpYWwgdXNlciBvZiBGcmVlQlNEIHdpdGggc2VjdXJpdHkgY29u c2Npb3VzIGN1c3RvbWVycywgSSB3b3VsZCBjZXJ0YWlubHkgbGlrZSB0byBzZWUgaXQgZml4ZWQg aW4gYSBGcmVlQlNEIHBhdGNoIHJlbGVhc2UsIGJ1dCBpbiBhbGwgaG9uZXN0eSB3ZSBjb3VsZCBl YXNpbHkgZW5vdWdoIGFwcGx5IHRoZSBvcGVuc3NsIHBhdGNoZXMgdG8gb3VyIEZyZWVCU0Qgc291 cmNlIHRyZWUgb3Vyc2VsdmVzLg0KDQotIFN0ZXZlIFdhbGwNCg==