From owner-freebsd-security@FreeBSD.ORG Sun Oct 2 11:10:18 2011 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 909461065670 for ; Sun, 2 Oct 2011 11:10:18 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3fd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id EF1CB8FC0C for ; Sun, 2 Oct 2011 11:10:17 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [81.187.76.163]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.5/8.14.5) with ESMTP id p92BAEVg029787 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Sun, 2 Oct 2011 12:10:14 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.8.3 smtp.infracaninophile.co.uk p92BAEVg029787 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1317553814; bh=IfMxchKJOlhjps9CVAJxKUxM4xoo5KjEpkBcGAiX2Xc=; h=Message-ID:Date:From:MIME-Version:To:Subject:References: In-Reply-To:Content-Type:Cc:Content-Type:Date:From:In-Reply-To: Message-ID:Mime-Version:References:To; z=Message-ID:=20<4E88468F.2080503@infracaninophile.co.uk>|Date:=20S un,=2002=20Oct=202011=2012:10:07=20+0100|From:=20Matthew=20Seaman= 20|User-Agent:=20Mozilla/5.0=20(M acintosh=3B=20Intel=20Mac=20OS=20X=2010.6=3B=20rv:7.0.1)=20Gecko/2 0110929=20Thunderbird/7.0.1|MIME-Version:=201.0|To:=20freebsd-secu rity@freebsd.org|Subject:=20Re:=20FreeBSD=20Security=20Advisory=20 FreeBSD-SA-11:05.unix|References:=20<201110010410.p914Ap3F001617@c hilled.skew.org>=20<4E86A12E.3070600@FreeBSD.org>=20<808B16DD-6AC6 -438D-B2AE-895C5875EFC5@anduin.net>=20=20<201110020453.WAA24453@ lariat.net>|In-Reply-To:=20<201110020453.WAA24453@lariat.net>|X-En igmail-Version:=201.3.2|OpenPGP:=20id=3D60AE908C|Content-Type:=20m ultipart/signed=3B=20micalg=3Dpgp-sha1=3B=0D=0A=20protocol=3D"appl ication/pgp-signature"=3B=0D=0A=20boundary=3D"------------enig5A7E 62BBF62CA10731E4A0D6"; b=yrrjBZZjGnYdUO3aWZHjPALGXXbD+UzgNvRkB+KLgdAwnAy34UBzbzVsdNvvElrr9 f3teMrjB1rtm33bQTTLntAMobRYQwmWr7CQHFH7OjCpwuGoKGzAp+bvK6YH4K1u0Al p1XEgvA41x0J5ejHrtO4cGf4n0WvbnSRWUrXOFuo= Message-ID: <4E88468F.2080503@infracaninophile.co.uk> Date: Sun, 02 Oct 2011 12:10:07 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1 MIME-Version: 1.0 To: freebsd-security@freebsd.org References: <201110010410.p914Ap3F001617@chilled.skew.org> <4E86A12E.3070600@FreeBSD.org> <808B16DD-6AC6-438D-B2AE-895C5875EFC5@anduin.net> <201110020453.WAA24453@lariat.net> In-Reply-To: <201110020453.WAA24453@lariat.net> X-Enigmail-Version: 1.3.2 OpenPGP: id=60AE908C Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig5A7E62BBF62CA10731E4A0D6" X-Virus-Scanned: clamav-milter 0.97.2 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-0.6 required=5.0 tests=BAYES_05,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_FAIL autolearn=no version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on lucid-nonsense.infracaninophile.co.uk Subject: Re: FreeBSD Security Advisory FreeBSD-SA-11:05.unix X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Oct 2011 11:10:18 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig5A7E62BBF62CA10731E4A0D6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 02/10/2011 05:53, Brett Glass wrote: > Another question. Suppose one has built a custom kernel (as I always > do). Does FreeBSD-update update the kernel sources such that I can do a= > simple "make buildkernel installkernel"? Or do I also have to csup my > kernel sources to some specific tag and rebuild? If so, how do I know > which tag? Yes -- freebsd-update will update your system sources. Unless you've specifically told it not to. In general, if you're using freebsd-update(8) you shouldn't need to use csup(1) for the system bits, and vice-versa. If you are using csup alongside freebsd-update, then just update to the latest available on whichever RELEASE branch you are tracking. So for 8.2-RELEASE-p3, the tag in your supfile should be RELENG_8_2. But that really shouldn't be necessary. Still unsure? The advisory will detail which of the system sources have been modified and give details of the revision numbers for the files on all the affected branches. It's easy to just read the files concerned and compare contents of the $FreeBSD$ tag to what's in the advisory. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matthew@infracaninophile.co.uk Kent, CT11 9PW --------------enig5A7E62BBF62CA10731E4A0D6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk6IRpYACgkQ8Mjk52CukIzOXgCgh4v8dc1+bieTnXRFjQRg/dOv 7NsAnRbiD+Lck7/iZBQ9LVPH/C9YMLfD =8ouz -----END PGP SIGNATURE----- --------------enig5A7E62BBF62CA10731E4A0D6--