Date: Mon, 30 May 2011 11:09:03 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: freebsd-questions@freebsd.org Subject: Re: After freebsd-update.... Message-ID: <4DE36CBF.6060602@infracaninophile.co.uk> In-Reply-To: <4DE35A02.6000406@eskk.nu> References: <4DE35A02.6000406@eskk.nu>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigED7583C18B1358FD368490BD
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
On 30/05/2011 09:49, Leslie Jensen wrote:
>=20
> My system still is shows #0
>=20
> 8.2-RELEASE #0
>=20
>=20
> Following the latest FreeBSD Security Advisory FreeBSD-SA-11:02.bind
>=20
> I did
>=20
> # freebsd-update fetch
> # freebsd-update install
>=20
> And a reboot, but my system doesn't indicate the update!
>=20
> Any suggestions ?
You have applied the update successfully. You won't see any difference
in the output from uname(1) because this update when applied via
freebsd-update(8) doesn't touch the kernel. It only affects named(8).
This is the patched version in 8.2-STABLE:
% /usr/sbin/named -v
BIND 9.6.-ESV-R4-P1
Since this update doesn't touch the kernel, it isn't necessary to reboot
to apply it: simply restart named(8) if you're running it. If you're
not running named then the vulnerability addressed by the patch doesn't
exist on your server. You should however be concerned about the version
of named running on any recursive resolvers listed in /etc/resolv.conf.
Even if you aren't running named(8) it's worth applying the update just
in case you do later decide to run it.
If you had applied the security patches to the source code and
recompiled, or had updated to the latest X.Y-STABLE sources, you would
have an updated newvers.sh and consequently an updated output from
uname(1) -- but this is just bookkeeping and makes no functional
difference to the system.
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matthew@infracaninophile.co.uk Kent, CT11 9PW
--------------enigED7583C18B1358FD368490BD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk3jbMYACgkQ8Mjk52CukIxOqQCfVMtTaAfbJs13FtJHSFyyFAxM
i68An2LQsqr+3qMf/uu75RXfd2tcoPRk
=rL+3
-----END PGP SIGNATURE-----
--------------enigED7583C18B1358FD368490BD--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4DE36CBF.6060602>