From nobody Tue Feb 14 08:11:40 2023 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PGDSj4KZWz3rNQ7 for ; Tue, 14 Feb 2023 08:11:49 +0000 (UTC) (envelope-from fabian@wenks.ch) Received: from batman.home4u.ch (batman.home4u.ch [IPv6:2001:8a8:1005:1::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "home4u.ch", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4PGDSg4BPkz3G8Y for ; Tue, 14 Feb 2023 08:11:47 +0000 (UTC) (envelope-from fabian@wenks.ch) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of fabian@wenks.ch designates 2001:8a8:1005:1::2 as permitted sender) smtp.mailfrom=fabian@wenks.ch; dmarc=none X-Virus-Scanned: amavisd-new at home4u.ch Received: from [0.0.0.0] (flashback.wenks.ch [IPv6:2001:8a8:1005:1:0:0:0:4]) (authenticated bits=0) by batman.home4u.ch (8.17.1/8.17.1) with ESMTPSA id 31E8BeoU020806 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Tue, 14 Feb 2023 09:11:42 +0100 (CET) (envelope-from fabian@wenks.ch) Message-ID: <067eb4e5-fa62-3129-12a5-f7108d2905fc@wenks.ch> Date: Tue, 14 Feb 2023 09:11:40 +0100 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.7.2 Subject: Re: [openssl@openssl.org: OpenSSL Security Advisory] Content-Language: de-CH, en-US To: freebsd-security@freebsd.org References: <1edf53ab-65d6-dcd9-00be-7d198daa7f40@ximalas.info> <86h6vpv6pr.fsf@ltc.des.no> From: Fabian Wenk In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spamd-Result: default: False [-3.50 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RCVD_IN_DNSWL_MED(-0.20)[2001:8a8:1005:1::2:from]; R_SPF_ALLOW(-0.20)[+ip6:2001:8a8:1005:1::2]; MIME_GOOD(-0.10)[text/plain]; ASN(0.00)[asn:15623, ipnet:2001:8a8::/32, country:CH]; R_DKIM_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; DMARC_NA(0.00)[wenks.ch]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_HAS_DN(0.00)[]; TO_DN_NONE(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Queue-Id: 4PGDSg4BPkz3G8Y X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N Hello On 13.02.2023 22:31, Hugo Koji Kobayashi wrote: > On Mon, Feb 13, 2023 at 06:02:56PM +0100, Dag-Erling Smørgrav wrote: >> Natalino Picone writes: >> > Is there an ETA for this OpenSSL update to reach the base? >> >> Last Tuesday. > > Are there any plans of applying these patches to releng/12.3, > releng/12.4 and releng/13.1 branches? Maybe I've missed something, but > I've seen them applied only to stable/12, stable/13 and the upcoming > releng/13.2 branches. I guess this may be the push needed to also update/patch OpenSSH in releng/12.3, releng/12.4 and releng/13.1 and release an SA: https://www.openwall.com/lists/oss-security/2023/02/13/1 Best regards, Fabian