From owner-freebsd-security@freebsd.org Thu May 5 14:38:28 2016 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2814BB2E8E3 for ; Thu, 5 May 2016 14:38:28 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 03E171D72 for ; Thu, 5 May 2016 14:38:27 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 93D822031C for ; Thu, 5 May 2016 10:38:26 -0400 (EDT) Received: from web4 ([10.202.2.214]) by compute6.internal (MEProxy); Thu, 05 May 2016 10:38:26 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=W4HplsPAFOpn4ij 7OoGrjY2Zy4Y=; b=FiBDyg/EkRs6G2z07cuptebzs4FVz6/UNJ8Qa7o58Jj8ooZ RZxXENn8Yo7JGgPYXqLQIaZD/hnw+FLihE3r9WTt+luAZINjucfx2YbRKaXlj9JY jXHsB6f4FhR0KK7loiLmgb6KtuZbpOasW+s/XLWeJiOnw41bfltc8lFXcJs4= Received: by web4.nyi.internal (Postfix, from userid 99) id 71434108A55; Thu, 5 May 2016 10:38:26 -0400 (EDT) Message-Id: <1462459106.1988234.599085033.60BC901A@webmail.messagingengine.com> X-Sasl-Enc: /3qXPe0E6AYgnzQOkbnXVT+V44wVhAnqK6lXbsbD66L3 1462459106 From: Mark Felder To: freebsd-security@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-140377c4 Subject: Re: FreeBSD Security Advisory FreeBSD-SA-16:17.openssl Date: Thu, 05 May 2016 09:38:26 -0500 In-Reply-To: References: <20160504225546.748191CFC@freefall.freebsd.org> X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 May 2016 14:38:28 -0000 On Wed, May 4, 2016, at 21:32, Mel Pilgrim wrote: > On 5/4/2016 3:55 PM, FreeBSD Security Advisories wrote: > > FreeBSD-SA-16:17.openssl Security Advisory > > The FreeBSD Project > > Something seems amiss with the update servers: > > # freebsd-version > 10.3-RELEASE-p1 > # freebsd-update fetch > src component not installed, skipped > Looking up update.FreeBSD.org mirrors... 4 mirrors found. > Fetching metadata signature for 10.3-RELEASE from update6.freebsd.org... > done. > Fetching metadata index... done. > Inspecting system... done. > Preparing to download files... done. > > No updates needed to update system to 10.3-RELEASE-p0. > # > > Tried after emptying /var/db/freebsd-update > The freebsd-update mirrors do not have the latest updates for amd64 on any supported RELEASE. The i386 bits are there, but not amd64. I do not know if generating them failed or if something else happened that prevented their deployment. It appears the updates are pulled not pushed, so as soon as they are available on the master mirror they should be distributed within a few minutes. I have emailed secteam@ about it but have not yet heard back. -- Mark Felder ports-secteam member feld@FreeBSD.org