FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver

[Glen Barber]

On Mon, Apr 29, 2013 at 04:08:22PM -0600, Brett Glass wrote:
> Please be advised that, when using freebsd-update(8) to install the patch for
> this security problem, freebsd-update will move the current kernel to /boot/kernel.old,
> and install a new GENERIC kernel in /boot/kernel, even if you have built a custom
> kernel and created a copy of the GENERIC kernel in /boot/GENERIC. 
> 
> The kernel in /boot/GENERIC is NOT updated, nor are the modules in that directory
> updated. What's more, if you did not build modules for your custom kernel, you
> will not get copies of the updated NFS modules.
> 
> This is probably not the behavior most users who have built custom kernels will
> want or expect. (I would have hoped that the GENERIC kernel, its modules, and the
> kernel sources would be updated and that I'd be reminded to rebuild my custom kernel
> if necessary.)
> 

This has _always_ been the case with freebsd-update(8).

Glen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-security/attachments/20130429/39503c83/attachment.sig>