From nobody Sun Feb 19 02:28:50 2023 X-Original-To: freebsd-arm@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PK8cz0Zb1z3sHBB for ; Sun, 19 Feb 2023 02:29:07 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic306-21.consmr.mail.gq1.yahoo.com (sonic306-21.consmr.mail.gq1.yahoo.com [98.137.68.84]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4PK8cy4qX0z4F5h for ; Sun, 19 Feb 2023 02:29:06 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1676773744; bh=QJQbSpi80ETwAynCjY/l5xayoDik06TGoefxOBIvwfI=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject:Reply-To; b=Scvx/rIJDb+JRjIXDcMV7N7w1i2VqKP/ydmuizNQuUhqcMXT/sbO1mcn0pJ6ULKJ/v+yT2suFPsMqTOCFxJI3tNhDOwkTKSRG5zDake7/PGHrwGwJ4DlxiQ+VH9qiYAndYv8SiBKkRQhB2GAd64a7GeInoU9NuF+Xx57Z3kvzcZSrtblLYaVUk6JtlYIRUvMPKrzMJ1Sl1RBZXEIqcVGJ+m4lRYnOCKPJN4Cp8xGFHRuhJxVOWXmFyGpi354Bq88EibHycaVL38jZsv1C28GEOHAWvwKFJoInG65rOYWTCBLNK9hT+P1v7xI2wTEgm+2mWMa8FXE5tez6Vaq2UklMQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1676773744; bh=Vrwo9X5Rf2Fb5IftqPan380HJQuC1Gq+aiDTGWsEMim=; h=X-Sonic-MF:Subject:From:Date:To:From:Subject; b=TM0LhI02lANEXc/tIWOOKcX/coZmZr8DZ3VODNFgj2YnHJTt4BifOEYIOmvwd28c49lflPYniaLFRv1r9fo62tU2ogF18OtVqkq5kXbW89mCbJNrMItmClZQ7Es1JM/abpwjysUITZwyssHoM8GnlvLccwzYCnys52J5/TM9rDbLkSDHrtt8tHEbs5LB+iHJK2aTSeVHEEZQ7GE8MHVbAvgqPTFWU5+JIrLDVG5DGrRdhzTeSU+3KxqJsfutOPphb4lb7yhNkaLGmjWVetPdYT5Y1GsPrITeQXR+mhssn6b6C+NB2mCdqm7xA/fip6O/p4xEdzpvV5ySmGuzgs6Qhw== X-YMail-OSG: YrNrY.YVM1kLw2lNhmqcIUd8KnjHJzjUIaeKx7vz_1h.yODD0EF_rITwl9OFeud 5I.lIPik56aTmdtnwFUh1Z0fDt6xJTTxT6TWghhaMFIisBPlSWA2qtKEr5lfbTzrPtN0hPxqSCkM VhOJpK2uAY5ubX0VFiHqWC6O9xMOZPbArN93cblExJXT0b3SB2W2KybBZrVdn6BpEpwubHcuAtVg W9zU5293Qu8x29LNqzkTffNsc4YLe2Xtg_pOY_cMZ_H.H3xfSClnM2mDEHHjqDkvcA3CXDu_8KZD OTc6rkKFyVS5jjk9_3NGdg3PgOSxQCNc_SNP3tn1.7cZJiLxl_PD8O7332OMQpciKK_CguEFtLXd GiUolTcdTGytCqb_uwBojaY6THvpEEj4RbLq2y4b_8UOtyqA3QaLCX5LW1Fwr8tadG9ArGRevN5f x1ife8J2yXivldBKZFiJdR26iw4sj2TTxYTeT4r1KyNPkj5Ww8gU_FnlWsACERQyN1hPtVe5X4jY H7J.F80tbzBKqGXiDD1.cmLce5BZjxS969Bws2DUXGWhPMXnpx109QHpA3BPImhsGka54brwwLBR qtcJ32yK3LJVIazSyDkK1MkEz6qiI1LG2ZwDidYQ1JHDHzzFOnpHxfHb2bC3GmTjzNjsGmHtbjRZ z_NXP98ESrTqwolx8UTw71pGBFMc7nsJ8V1qeELaFNe4DVzmazTyYMvjYcbrOzevuho44j7ce0tb SZvtP3Mp3EWx5dDiGzYwjv3Ez31gXmAT8fjj0YwrVhdTsuWaGdvSdHYT6RXi2HGY.1pjuyAYV_NS OVtvy7bvagDJra.SMQQf4hH.LVwNKSGCQVnMOhlBIRzgDt9EJIyeEVJSsaEReejQkdAMpnqC659j _Ho5elHJyx9HOGRsy6v.aXfzwct8.4F88utnnu0lyk6p7qwzjurjqf2GISzjXaN_dKbVb3fotfX8 RXr8sVEg3y1Us4Hol.sfkcPvqIv.2JH7wnWdSH162BIv2rIP6vRjyHeMAcoXKRoIffnNV63oQBnI xdWxgEEBB7z05Zxgn2KZUn26gHdlD_.uB7KA92xxScHjiBtx_NtDh.iTDu1qnhqOVbt2IVmjais4 fYx.BLbeYDN_IY2_TADRiJQUQDLFS5BAjHNuwS4PaUFoKDw7zDKTFQTmaipw_Z0S5DzmVvWaBkqD OFej63_RHF6no6cM2NhPA7VKmCDJw2qKouA.Xx1uKVxyKUBxCTKf11HOrUieS7xXBlNUwcpBWyJQ PRfxC5GCOcOLct7IbrhlIzB9cK3R0klhI4ZkIhBUoEl2h9z038.Y6s2hGfvqHzvpm8E9U6QN0gGj po6bkWure0KbUxCNFN0Yg4T33yOBiunvTcQRYrCoINkW4dlw45wsK.uveddILsrJAC4k6uwrwYN2 EVw1xtmJ28DLka6iEok0acETzGWr5ZtELmosk6_NZhlapLn8MFStV3M1HXgqiKEFVUg0AnAKmPwT qdhh9civghUnyM6zk27H14s3doGRnQlGIMKjssYomTfdSGyBRQ9ADhXHWJXH9BfTbpWhHC.g_vnf vYnL6hZReL5PnBzph2ZbAVtMgsLh596JqiZA5TL8Oo0w4PgsdS0WC.KwHhb49mjn_Op86tbb5Y8J k1Wy2St5eSEdUaUlu_p5aJislYAORrUfBIhp7gvBcLFGg7A_M4w7V1KePhK38o5HprMutDd5Yb4t 0cbZ5U2K9Y_QU9bmWkbuVaF6CR06Q6kb9eBIBiA5w_kmTGEdCl69Ah.8RffMig4rfVU3_idPdGV5 kFeEPzYGh3ZYIsbcwXKlz21nF.DErenTZKPpak283mU04agzrmcFzarLTCIvvWz2ETKMhm1l5sLM r2ILHroNWLhXCaXdAaOZCEShN7GBMTz_vLtIwKWYGI2z5TyCoGzljUZ6s5zNZbdB0xeFXDZ90hxj z0vX5XANxVpAQIGuD5dWmsG6geyR1IwUmTglju2Op1.E2hkxp.SeVYThMSKJ3mWD3Mcl_5wkrD9m lmeRceT_3mHQbwrAONO_dNylHcz0PWzAZPR8ChMK9Of31uoT2o_Ux7Rbonhcv5UtokYZefEv6wTn RcTa8m4HFyrSnC17y0dY.27ADAew5FTJXA5rB0ESDNSMuMWbGmIMjUm3zDv0OIVYG6A_5MKAUowO E02fMRK5upb21x4TRJN1JT8rrA.XlPAtcya_EAfgN3guT4MaALen2659syCfDgo486hCn5sN9EHJ h6NlPUoUhlbrf9Q4Kfqoke.jXTRtjph4_MlgrF2mv2jWFHHKGAQ8xcNbyiEDSAWmW9mN2nf19Ajy I X-Sonic-MF: Received: from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.gq1.yahoo.com with HTTP; Sun, 19 Feb 2023 02:29:04 +0000 Received: by hermes--production-ne1-746bc6c6c4-wq9r9 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 7b5101b4723e54b3b5a6fb8434b33dd2; Sun, 19 Feb 2023 02:29:01 +0000 (UTC) Content-Type: text/plain; charset=us-ascii List-Id: Porting FreeBSD to ARM processors List-Archive: https://lists.freebsd.org/archives/freebsd-arm List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arm@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\)) Subject: Re: freebsd-update confusion From: Mark Millard In-Reply-To: Date: Sat, 18 Feb 2023 18:28:50 -0800 Cc: freebsd-arm@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <6429E063-2B5F-4426-9885-EE81493CF0FA@yahoo.com> References: To: void X-Mailer: Apple Mail (2.3731.400.51.1.1) X-Rspamd-Queue-Id: 4PK8cy4qX0z4F5h X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N On Feb 18, 2023, at 17:09, void wrote: > On Sat, Feb 18, 2023 at 04:04:20PM -0800, Mark Millard wrote: >=20 >> Same point for 13.1-RELEASE-p7 here: >> OpenSSL 1.1.1o was patched to remove the problems. That does >> not produce 1.1.1t as a result. >=20 > ok - so I'm understanding from what you're saying is that > (in this case) 13.1R is following openssl 1.1.1o branch >=20 > ok I wasn't aware it was tied in this way. >=20 >> The output of the openssl command likely is just as upstream >> has defined it, it not being directly a FreeBSD thing. The >> patches to the openssl source were likely also from upstream. >=20 > I still find it counterintuitive though that after being patched, = openssl version still returns 3 May 2022 and not the patch date. --=20 >=20 Actually, looking at history, there is an example from the past that updated the date (for 1.1.1k) after the actual changes had been committed: = https://cgit.freebsd.org/src/commit/crypto/openssl/include/openssl/openssl= v.h?h=3Dreleng/13.1&id=3D9d31ae318711825d3a6ffa544d197708905435cf shows: Fix multiple OpenSSL vulnerabilities. Approved by: so Security: SA-21:16.openssl Security: CVE-2021-3711 = Security: CVE-2021-3712 (cherry picked from commit = be158ffe54dcc4a633652685afc5e37894e10ea0)=20 Diffstat (limited to 'crypto/openssl/include/openssl/opensslv.h') -rw-r--r-- crypto/openssl/include/openssl/opensslv.h 2 1 files changed, 1 insertions, 1 deletions diff --git a/crypto/openssl/include/openssl/opensslv.h = b/crypto/openssl/include/openssl/opensslv.h index ec4a1123f131..328d0971c414 100644 --- a/crypto/openssl/include/openssl/opensslv.h +++ b/crypto/openssl/include/openssl/opensslv.h @@ -40,7 +40,7 @@ extern "C" { * major minor fix final patch/beta) */ # define OPENSSL_VERSION_NUMBER 0x101010bfL -# define OPENSSL_VERSION_TEXT "OpenSSL 1.1.1k-freebsd 25 Mar 2021" +# define OPENSSL_VERSION_TEXT "OpenSSL 1.1.1k-freebsd 24 Aug 2021" /*- * The macros below are to be used for shared library (.so, .dll, ...) Looking at releng/13.0 history: = https://cgit.freebsd.org/src/commit/crypto/openssl?h=3Dreleng/13.0&id=3D22= 61c814b7fa4730f308b476eff1afb0dcdf35ec also got that change as part of the commit on that branch. So, may be the date in that part of the text is considered FreeBSD specific. (My wording has ignored when FreeBSD contributes material to opensll. So, sometimes specific changes might occur in FreeBSD first.) =3D=3D=3D Mark Millard marklmi at yahoo.com