From owner-freebsd-security@FreeBSD.ORG Fri Mar 20 18:42:32 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 19CB6D06 for ; Fri, 20 Mar 2015 18:42:32 +0000 (UTC) Received: from lordcow.org (lordcow.org [41.203.5.188]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "devaux.za.net", Issuer "devaux.za.net" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 60AB0783 for ; Fri, 20 Mar 2015 18:42:31 +0000 (UTC) Received: from lordcow.org (localhost [127.0.0.1]) by lordcow.org (8.14.5/8.14.5) with ESMTP id t2KIEFkB008897 (version=TLSv1/SSLv3 cipher=DHE-DSS-AES256-GCM-SHA384 bits=256 verify=NO) for ; Fri, 20 Mar 2015 20:14:15 +0200 (SAST) (envelope-from lordcow@lordcow.org) Received: (from lordcow@localhost) by lordcow.org (8.14.5/8.14.5/Submit) id t2KIEAXK008896 for freebsd-security@freebsd.org; Fri, 20 Mar 2015 20:14:10 +0200 (SAST) (envelope-from lordcow) Date: Fri, 20 Mar 2015 20:14:10 +0200 From: Gareth de Vaux To: freebsd-security@freebsd.org Subject: Re: Failure on 10.0? Re: FreeBSD Security Advisory FreeBSD-SA-15:06.openssl [REVISED] Message-ID: <20150320181410.GA8790@lordcow.org> References: <201503200729.t2K7TipS023432@freefall.freebsd.org> <29606747-8C51-4EF3-B507-46A75661E738@vpnc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <29606747-8C51-4EF3-B507-46A75661E738@vpnc.org> User-Agent: Mutt/1.5.23 (2014-03-12) X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=unavailable autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lordcow.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Mar 2015 18:42:32 -0000 On Fri 2015-03-20 (08:21), Paul Hoffman wrote: > It doesn't look like OpenSSL got updated, and it looks like a bunch of the attempted updates failed. Was this advisory tested on 10.0? I'm guessing this is pertinent: WARNING: FreeBSD 10.0-RELEASE-p18 HAS PASSED ITS END-OF-LIFE DATE. Need to run: freebsd-update -r 10.1-RELEASE upgrade