Date: Fri, 20 Mar 2015 08:21:51 -0700 From: Paul Hoffman <paul.hoffman@vpnc.org> To: freebsd-security@freebsd.org Subject: Failure on 10.0? Re: FreeBSD Security Advisory FreeBSD-SA-15:06.openssl [REVISED] Message-ID: <29606747-8C51-4EF3-B507-46A75661E738@vpnc.org> In-Reply-To: <201503200729.t2K7TipS023432@freefall.freebsd.org> References: <201503200729.t2K7TipS023432@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_D364B4D6-B596-4AF0-85F5-F6D1B390ABE1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii # sudo freebsd-update fetch Looking up update.FreeBSD.org mirrors... 5 mirrors found. Fetching metadata signature for 10.0-RELEASE from update6.freebsd.org... = done. Fetching metadata index... done. Inspecting system... done. Preparing to download files... done. The following files will be added as part of updating to = 10.0-RELEASE-p18: /usr/src/contrib/tzdata/zone1970.tab /usr/src/crypto/openssl/crypto/constant_time_locl.h /usr/src/crypto/openssl/crypto/constant_time_test.c /usr/src/crypto/openssl/doc/apps/c_rehash.pod /usr/src/crypto/openssl/doc/crypto/CMS_add1_signer.pod /usr/src/crypto/openssl/doc/ssl/SSL_CTX_set_tlsext_ticket_key_cb.pod /usr/src/crypto/openssl/ssl/heartbeat_test.c /usr/src/crypto/openssl/ssl/ssl_utst.c /usr/src/crypto/openssl/util/mkbuildinf.pl /usr/src/secure/lib/libcrypto/man/CMS_add1_signer.3 /usr/src/secure/lib/libssl/man/SSL_CTX_set_tlsext_ticket_key_cb.3 /usr/src/secure/usr.bin/openssl/man/c_rehash.1 WARNING: FreeBSD 10.0-RELEASE-p18 HAS PASSED ITS END-OF-LIFE DATE. Any security issues discovered after Sat Feb 28 19:00:00 EST 2015 will not have been corrected. # sudo freebsd-update install Installing updates...install: ///usr/src/contrib/tzdata/zone1970.tab: No = such file or directory install: ///usr/src/crypto/openssl/crypto/constant_time_locl.h: No such = file or directory install: ///usr/src/crypto/openssl/crypto/constant_time_test.c: No such = file or directory install: ///usr/src/crypto/openssl/doc/apps/c_rehash.pod: No such file = or directory install: ///usr/src/crypto/openssl/doc/crypto/CMS_add1_signer.pod: No = such file or directory install: = ///usr/src/crypto/openssl/doc/ssl/SSL_CTX_set_tlsext_ticket_key_cb.pod: = No such file or directory install: ///usr/src/crypto/openssl/ssl/heartbeat_test.c: No such file or = directory install: ///usr/src/crypto/openssl/ssl/ssl_utst.c: No such file or = directory install: ///usr/src/crypto/openssl/util/mkbuildinf.pl: No such file or = directory install: ///usr/src/secure/lib/libcrypto/man/CMS_add1_signer.3: No such = file or directory install: = ///usr/src/secure/lib/libssl/man/SSL_CTX_set_tlsext_ticket_key_cb.3: No = such file or directory install: ///usr/src/secure/usr.bin/openssl/man/c_rehash.1: No such file = or directory done. It doesn't look like OpenSSL got updated, and it looks like a bunch of = the attempted updates failed. Was this advisory tested on 10.0? --Paul Hoffman --Apple-Mail=_D364B4D6-B596-4AF0-85F5-F6D1B390ABE1 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJVDDsPAAoJEJz/fXByZmLZzVIH/AgFRIjez8UT/VviEDpBJzu7 tPabVAV50+GRloFC+QoMuwA+ds9b13kF7fA1IN+h0I0tRNukIr6j+yMZK0U/coZt L/PUzXL3XiRyJyp0tWi+7pBBVioVNXMwhVEOc05kETC5zfYCbdJiUIwKLERLtcpt pPwU747/WnnYoN5iw/b7bsvcIaMl3Vai4tRVsaWurTpj4TxOtKzZF9vFUEfikVPG 2Ic1Yow5TrW+7wLKgEbpNoPVs1yN6JQHZuFbGhaymixpj8hLUjTBQjmpdEtZF7Ge P8hE3U2Xo4OoVPGYTr1jMMV0TYA9P5SpNhsE1x0X04AnSUZd2uQFNPHAb0Svtew= =2tpW -----END PGP SIGNATURE----- --Apple-Mail=_D364B4D6-B596-4AF0-85F5-F6D1B390ABE1--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?29606747-8C51-4EF3-B507-46A75661E738>