From owner-freebsd-security@freebsd.org Thu Dec 10 15:43:38 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 23E524AF0A7 for ; Thu, 10 Dec 2020 15:43:38 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2062b.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d05::62b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "GlobalSign Organization Validation CA - SHA256 - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CsJ9P0hkVz4cgR for ; Thu, 10 Dec 2020 15:43:36 +0000 (UTC) (envelope-from stephen.wall@redcom.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IQ6tn1gc1ZceCl5starZKAIuWMrtSreNoOSgUUqtlRt2TDNd6EwRlx5KvGLhwAHVykDHV9JIpX54DYxkY529OcG+6iYK0D2gB7vpqhMmeNWQO8tBP/DBCb8culol7gIiEH0dsunMFKkmGjUFJi++KZZd7mRh54+oBdVAntzAgpgk9xfeWOtpiDjq3gbjzJRTnlhwGj731mPAsrybCbNT2ZZn2vCi1/hLir6EB8FWGEKQt9/tmFt03vJOQ8WNX1oV/NtgKMxl8ATHMWxFIAlh33btuXbF3qlqlN6M+yACEakzGrQW10maw7imMXCbBRLrkDwmWEvlm8uAOapoJbjt9g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X9mrvWXYB35d7eH8z8tUIYiVIUAfaVVBoz/JbqhgjwU=; b=l0HxJeIr4Ll1c3QP7nkeBu3OdpPX0p9XGsi+BpbIshNH2In8lVKt3tVIHBrrn5zk8C7Ea3Yxs9ZTYQoHzZlx1/YiNVEhCPwqczGRipcsWWxFBV+U++U5AIm8uKBHuRqc8/Q52jJggTEgdk2qLlPjpQsaHknqgb5X6s6/zD+WvQJ6n1EetjB3ImRG2MEcbMUZOsKc3qr/s+/T6gv1GrYC4ISlCKIzsYjuTPjzECaYJdJlKZQkwDswxzYNmwFMeYJW1xltqf4kDM+u76vT27Um8Bypwgby/V0BVwX7iFvVb3Ye0SgPgwFI4WYXLfbj7GWaADG/hW6Eeas6UxgXO+lKNw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcomlaboratories.onmicrosoft.com; s=selector1-redcomlaboratories-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X9mrvWXYB35d7eH8z8tUIYiVIUAfaVVBoz/JbqhgjwU=; b=z9ZUlxeIndWKtNufqrzB9Aekb8erXSXF/Cp/D/C8q1oY6FQxw6cFO+h0duSz28aWNjv2atLqZ6Pndih0xl7vXR82r4urxn67sBzU2qgHTfgb+WcIojxF1CtSlJ94iY1FKgBnUs3Bh3SbMX4ApHfrtRNe6hPS/1W9BT8JLACpBs+TLKnm/pfkHRv+XpdM3LvI4e/o1FrWpNiJpMu1T9cnQ+9o/OU5nPo9dBStj3nODnnR1/28FrsZkkFZ7PLL9M8qd/tPQ7guTyee5GbYy1vscgcmGp+SWI0P+BEbQpUgcA6x9HIB0BsWtM5lAYrOJTurmZXH6LzSxTTS3e6GQrHSig== Received: from DM6PR09MB4807.namprd09.prod.outlook.com (2603:10b6:5:260::13) by DM6PR09MB4951.namprd09.prod.outlook.com (2603:10b6:5:261::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3654.13; Thu, 10 Dec 2020 15:43:35 +0000 Received: from DM6PR09MB4807.namprd09.prod.outlook.com ([fe80::701f:923d:175b:8757]) by DM6PR09MB4807.namprd09.prod.outlook.com ([fe80::701f:923d:175b:8757%5]) with mapi id 15.20.3611.038; Thu, 10 Dec 2020 15:43:35 +0000 From: "Wall, Stephen" To: Bob Bishop , "freebsd-security@freebsd.org" Subject: Re: FreeBSD Security Advisory FreeBSD-SA-20:33.openssl Thread-Topic: FreeBSD Security Advisory FreeBSD-SA-20:33.openssl Thread-Index: AQHWzwsQh6XHLqMH+UGzHenC/ur53w== Date: Thu, 10 Dec 2020 15:43:35 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.48.157.2] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cfec6109-5d37-417b-e590-08d89d225adf x-ms-traffictypediagnostic: DM6PR09MB4951: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3968; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: W13kp4lvDQIzi6kpgEXIXLDSHCZb8E1tj+tT+ghzj5CdoEf0Uq/qzq8pSKep3pVbAWiyuLXu5TDBnUvEeJc4dz5BcMbtsuXsgxqIv2W1CQon4jYg2ttLU8OUmhRjblkanUy3/dpLMorSMUeaYn/AVX5Pymcx8SlY7mWA2xOXMhx8E2BnGYcByt559XUhLR2OcAEvMuLq5rupicnad6XF7yICzW5lFFuQUFVSJbENwMqmpeiSkPf/Ltzj+8XDYdGq0cDEoKPFoHMTaRR3xFl9Qe9BKfatO6eFE4u6v4BJ3C8aAjiwwD5+VSUZAkd5OTo1lVopFdBn5NxGxruhf53goA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR09MB4807.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(136003)(366004)(376002)(346002)(33656002)(52536014)(86362001)(64756008)(5660300002)(7696005)(66556008)(66476007)(6506007)(110136005)(66446008)(26005)(91956017)(76116006)(71200400001)(9686003)(558084003)(19627405001)(186003)(8676002)(55016002)(66946007)(8936002)(2906002)(508600001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?Windows-1252?Q?3QuSZ8nMalqpbVgjcucugBmAm39R64qc8bdb+WaPotXYxF3iUuL5cPu+?= =?Windows-1252?Q?LUIbrKagXdl/Uh5k/NDjIP6lOGOBfamqWkduWOwYjMwdE4q0pJOHNOoX?= =?Windows-1252?Q?jeTLBT6I4MX6qLnkvKBHL0+dv11CKjIdoaYsNkMC0v5Sq3GrCRgsPFEc?= =?Windows-1252?Q?aq8TU73sJnI3ZGrmx8jQpTngtAxS6yUYn6+iDDSmVbilWz/Yu7/1jPHh?= =?Windows-1252?Q?gSkgPMXOHyXa7ZpIkWW9Gt14eX67E64a0QJn0hktacUQaanMRBCncC6B?= =?Windows-1252?Q?niQb5VU7K42LiZt/RjH8Nx+enmPlpPMTyVp+Yy2F078JFXNlrBzY34Sd?= =?Windows-1252?Q?Br28BTw6VBoc+hAiJC86M++S6XogyzSyUu5P78l+xeH/zrdY/Cimt/47?= =?Windows-1252?Q?p4iKkyXN3T/aTAh2Pv25+KCc8lrxfsnBCA+KQ2k396wYly+//Heg718L?= =?Windows-1252?Q?J9YRGM2U82PDWvb+gZyMDixXYQ8c+AUTDZ4TxNtfqVt193DLV7wV7fqr?= =?Windows-1252?Q?LBA048AiWY4fw+KL5HCGjQ+9XUOOrtKbaiFRf8s+vO7v4wAZctvxreGx?= =?Windows-1252?Q?HY8TufDrLdI1qCTIkYZ9l3YePSLaww+iPkdOHvma7WweSIv6oZhTCy9p?= =?Windows-1252?Q?zs2uRwAGUVk8d9pHWHXXeAwvnBWuEK3cUafT38lPfOksf7gnIn5gBHeV?= =?Windows-1252?Q?bwpPXsfmiXSRR8BmLhEcATf3rW0pbISXUbB6qXrxRCZvH66tKI0d53M3?= =?Windows-1252?Q?x+EOZ0Ss8UrfqQFdcWTjs+iETz0jZD6RwlyzXx+Kk6g9V3LTnaZpTWEl?= =?Windows-1252?Q?uQZvZo8UQjTp730AMIAq1dEd+kH3A9PZ0s8MENXpnshYLW+7ukB4tVNt?= =?Windows-1252?Q?lRrhN3P/iW4jqyBz40UHCxV2RVoJbG3CLsWdrEGI0kjgvqQlpz89NjOt?= =?Windows-1252?Q?V3BIlWK7GsvwPLDExw2kTrNDY4Sq11gijsYod2eZOK83xVTNYHtevzDO?= =?Windows-1252?Q?yKA7wN26ebboYNyv48l8D2kJlLMSVKMxeaZEXhZxlH4m2/bBzFw=3D?= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR09MB4807.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cfec6109-5d37-417b-e590-08d89d225adf X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Dec 2020 15:43:35.1011 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: sjMBwZWMRi0dmCFL7gf6Kt6Pa+y6/FbQg0wdDkNL0HGvzDzvj6GvItU9oQhgO6ltUMxVY5us17cU/ZVJprPhBQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR09MB4951 X-Rspamd-Queue-Id: 4CsJ9P0hkVz4cgR X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=redcomlaboratories.onmicrosoft.com header.s=selector1-redcomlaboratories-onmicrosoft-com header.b=z9ZUlxeI; arc=pass (microsoft.com:s=arcselector9901:i=1); dmarc=none; spf=pass (mx1.freebsd.org: domain of stephen.wall@redcom.com designates 2a01:111:f400:7d05::62b as permitted sender) smtp.mailfrom=stephen.wall@redcom.com X-Spamd-Result: default: False [-1.50 / 15.00]; FAKE_REPLY(1.00)[]; TO_DN_EQ_ADDR_SOME(0.00)[]; R_DKIM_ALLOW(-0.20)[redcomlaboratories.onmicrosoft.com:s=selector1-redcomlaboratories-onmicrosoft-com]; HAS_XOIP(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f400::/48]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; DMARC_NA(0.00)[redcom.com]; RBL_DBL_DONT_QUERY_IPS(0.00)[2a01:111:f400:7d05::62b:from]; NEURAL_SPAM_SHORT(1.00)[1.000]; SPAMHAUS_ZRD(0.00)[2a01:111:f400:7d05::62b:from:127.0.2.255]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[redcomlaboratories.onmicrosoft.com:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; MAILMAN_DEST(0.00)[freebsd-security] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2020 15:43:38 -0000 > A query: am I right that the patch doesn=92t bump the OpenSSL version to = 1.1.1.i ? That is correct. - Steve Wall