FreeBSD Security Advisory FreeBSD-SA-20:19.unbound

[Craig Leres]

On 2020-07-09 11:37, Gordon Tetlow wrote:
> I would give that a try. Those files are part of the "base-dbg"
> package. Are you expecting that to be installed on this host?

That's helpful. freebsd-update.conf has:

     Components src world

without kernel because I always build custom. Does that imply base-dbg? 
I'm pretty sure I didn't select base-dbg when I installed this system.

Can I fix this by changing my Components line. Maybe this?

     Components src/src world/base

I looked at freebsd-update, the related man pages and the FreeBSD 
handbook and don't see a comprehensive list of components.

I just tried running this:

     zinc 55 # freebsd-update -r 12.1-RELEASE upgrade
     Looking up update5.freebsd.org mirrors... none found.
     Fetching metadata signature for 11.3-RELEASE from 
update5.freebsd.org... done.
     Fetching metadata index... done.
     Fetching 1 metadata patches. done.
     Applying metadata patches... done.
     Inspecting system... done.

     The following components of FreeBSD seem to be installed:
     src/src world/base

     The following components of FreeBSD do not seem to be installed:
     world/base-dbg world/doc world/lib32 world/lib32-dbg

     Does this look reasonable (y/n)? ^C

It doesn't appear to be that freebsd-update believes I have 
world/base-dbg installed?

> Note, I hope you are using "freebsd-update cron" in your cron.

I run it in a wrapper script that only sends email when the output 
changes but essentially I'm doing this:

     sleep `jot -r 1 0 3600` ; freebsd-update --not-running-from-cron fetch

So the same load balancing.

		Craig