From owner-freebsd-security@freebsd.org Mon Oct 26 17:54:08 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9F0AF82F0 for ; Mon, 26 Oct 2015 17:54:08 +0000 (UTC) (envelope-from SRS0+BfSK=K6=schulte.org=christopher@briareus.schulte.org) Received: from briareus.schulte.org (briareus.schulte.org [198.204.225.190]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6D24D120B; Mon, 26 Oct 2015 17:54:08 +0000 (UTC) (envelope-from SRS0+BfSK=K6=schulte.org=christopher@briareus.schulte.org) Received: from briareus.schulte.org (localhost [127.0.0.1]) by briareus.schulte.org (Postfix) with ESMTP id 95359277B4; Mon, 26 Oct 2015 12:52:14 -0500 (CDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=schulte.org; h=from:to :cc:subject:date:message-id:references:in-reply-to:content-type :mime-version; s=20130123; i=christopher@schulte.org; bh=wcABAJP 5jDW+lFiJTp2hpHBXFZ2ErPhwHn5y81lE4Iw=; b=GJg9lRHdOLz2sVusgm0awbx LYpur8f0kjgi1awEf9I1bblbDGqQ9hqp6Kqog4ymXygT7w/FankTnCG5gzzKLtp1 byszRaZYtolyY5dyK5pnKlf0hAUYACE/+elyfvgPikbP3xMY6bmZSdvPViV9kNM8 GXkoBStYGCQ58YM2va8E= x-schulte-info1: relayed through postfix client submission Received: from exchange2013.windows2012r2.schulte.org (10.200.1.188) by exchange2013.windows2012r2.schulte.org (10.200.1.188) with Microsoft SMTP Server (TLS) id 15.0.847.32; Mon, 26 Oct 2015 12:52:12 -0500 Received: from exchange2013.windows2012r2.schulte.org ([fe80::695c:2eae:3d60:8cd7]) by exchange2013.windows2012r2.schulte.org ([fe80::695c:2eae:3d60:8cd7%16]) with mapi id 15.00.0847.040; Mon, 26 Oct 2015 12:52:12 -0500 From: Christopher Schulte To: "freebsd-security@freebsd.org" CC: Matthew Seaman Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:25.ntp Thread-Topic: FreeBSD Security Advisory FreeBSD-SA-15:25.ntp Thread-Index: AQHREAdD/aQo17ha00uiNs0MwD8nIp5+RmMAgAATWwCAAAgaAA== Date: Mon, 26 Oct 2015 17:52:12 +0000 Message-ID: <1277A6B4-29F6-44B5-9342-4B2BDC9F7CFB@schulte.org> References: <201510261236.t9QCa2cm044240@think.nginx.com> <20151026155915.GA39073@in-addr.com> <20151026161356.GA1264@ircbsd> <562E6180.5060104@FreeBSD.org> In-Reply-To: <562E6180.5060104@FreeBSD.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-schulteexchange-note1: origination IP removed Content-Type: multipart/signed; boundary="Apple-Mail=_38199BAD-5092-438B-96AC-B4AA72718EA0"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2015 17:54:08 -0000 --Apple-Mail=_38199BAD-5092-438B-96AC-B4AA72718EA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 > On Oct 26, 2015, at 12:23 PM, Matthew Seaman = wrote: >=20 > I'm seeing a SEGV on startup of ntpd on 10.2-RELEASE-p6: >=20 > Oct 26 17:14:33 vhost-2 kernel: pid 35200 (ntpd), uid 0: exited on > signal 11 (core dumped) >=20 > This is from freebsd-update(8). I've a core dump available, but it's > not very illuminating without any debug symbols. >=20 > Cheers, >=20 > Matthew I was seeing the same thing on multiple systems, after running = freebsd-update and then bouncing ntpd. I rebooted one of the = problematic boxes; ntpd then started cleanly. I haven=92t tested this = across the board yet, though. Config: # freebsd-version -uk 10.2-RELEASE 10.2-RELEASE-p6 # uname -a FreeBSD mybox 10.2-RELEASE FreeBSD 10.2-RELEASE #0 r286666: Wed Aug 12 = 15:26:37 UTC 2015 = root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64= --Apple-Mail=_38199BAD-5092-438B-96AC-B4AA72718EA0 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMvzCCBjQw ggQcoAMCAQICASAwDQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAn BgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MTAyNDIxMDI1NVoX DTE3MTAyNDIxMDI1NVowgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSsw KQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFy dENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMsohUWcASz7GfKrpTOMKqANy9BV7V0igWdGxA8IU77L3aTxErQ+ fcxtDYZ36Z6GH0YFn7fq5RADteP0AYzrCA+EQTfi8q1+kA3m0nwtwXG94M5sIqsvs7lRP1aycBke /s5g9hJHryZ2acScnzczjBCAo7X1v5G3yw8MDP2m2RCye0KfgZ4nODerZJVzhAlOD9YejvAXZqHk sw56HzElVIoYSZ3q4+RJuPXXfIoyby+Y2m1E+YzX5iCZXBx05gk6MKAW1vaw4/v2OOLy6FZH3XHH tOkzUreG//CsFnB9+uaYSlR65cdGzTsmoIK8WH1ygoXhRBm98SD7Hf/r3FELNvUCAwEAAaOCAa0w ggGpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSuVYNv7DHKufcd +q9rMfPIHeOsuzAfBgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRa MFgwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYh aHR0cDovL3d3dy5zdGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5j b20vc2ZzY2EuY3JsMIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQEFBQADggIBADqpJw3I07QW ke9plNBpxUxcffc7nUrIQpJHDci91DFG7fVhHRkMZ1J+BKg5UNUxIFJ2Z9B90Micc/NXcs7kPBRd n6XGO/vPc87Y6R+cWS9Nc9+fp3Enmsm94OxOwI9wn8qnr/6o3mD4noP9JphwUPTXwHovjavRnhUQ HLfo/i2NG0XXgTHXS2Xm0kVUozXqpYpAdumMiB/vezj1QHQJDmUdPYMcp+reg9901zkyT3fDW/iv JVv6pWtkh6Pw2ytZT7mvg7YhX3V50Nv860cV11mocUVcqBLv0gcT+HBDYtbuvexNftwNQKD5193A 7zN4vG7CTYkXxytSjKuXrpEatEiFPxWgb84nVj25SU5q/r1Xhwby6mLhkbaXslkVtwEWT3Van49r KjlK4XrUKYYWtnfzq6aSak5u0Vpxd1rY79tWhD3EdCvOhNz/QplNa+VkIsrcp7+8ZhP1l1b2U6Ma xIVteuVMD3X0vziIwr7jxYae9FZjbxlpUemqXjcC0QaFfN7qI0JsQMALL7iGRBg7K0CoOBzECdD3 fuZil5kU/LP9cr1BK31U0Uy651bFnAMMMkqhAChIbn0ei72VnbpSsrrSdF0BAGYQ8vyHae5aCg+H 75dVCV33K6FuxZrf09yTz+Vx/PkdRUYkXmZz/OTfyJXsUOUXrym6KvI2rYpccSk5MIIGgzCCBWug AwIBAgICP3swDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENv bSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYD VQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTAeFw0x MzEyMDEwMDI3MTRaFw0xNTEyMDIxNzE0MjBaMIGaMRkwFwYDVQQNExBUVDlHZDlCNEYyMWg4dlND MQswCQYDVQQGEwJVUzESMBAGA1UECBMJTWlubmVzb3RhMRYwFAYDVQQHEw1Ccm9va2x5biBQYXJr MRwwGgYDVQQDExNDaHJpc3RvcGhlciBTY2h1bHRlMSYwJAYJKoZIhvcNAQkBFhdjaHJpc3RvcGhl ckBzY2h1bHRlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKPhuNOCZK0CMSh zn06teQRGkHFnQQ20fIYoX7SpBH2UBMbB9IgqIv1aS87ECnmvZXZM9zEiHyRoOZHJBbX8G/4JBau Cku8AtAfxT+uW3XCqS2gXOsfB8ZNuzAoaDtShdTzEeKuReE6kj0BhsI3oaKXgRcLcOGoelcDZ2wf RZGEpsuW8yiidrhaL815p9Z8+rclqf6WuM/tpKhEs0bUq1PGqQwnW8Pl7ZdpoEGTl4vAHYQRq9rU o6loVnmZ0h3x5equPYQCSz1YMpmqcortPYHKHm1Y42YhV8qtMf7n2C+Q80r83UCMjbtwZY5JuV+u lvpk7dmOmiYuEieJs38X8xECAwEAAaOCAt0wggLZMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0G A1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQUdfOQwtBhqAgHKEOKbClY6XXY 898wHwYDVR0jBBgwFoAUrlWDb+wxyrn3HfqvazHzyB3jrLswIgYDVR0RBBswGYEXY2hyaXN0b3Bo ZXJAc2NodWx0ZS5vcmcwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAuBggr BgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYBBQUHAgIw geowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlm aWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDIgVmFsaWRhdGlvbiByZXF1 aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhl IGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxp Z2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTIt Y3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRz c2wuY29tL3N1Yi9jbGFzczIvY2xpZW50L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0 c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MyLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDov L3d3dy5zdGFydHNzbC5jb20vMA0GCSqGSIb3DQEBBQUAA4IBAQA5BXUGkSf2khynbNShAG6MVxva 0/GnPhantmNe/Z0YmkEn2nSTYJVuapWpGiJul70rgbe/Y0cx0cF6XaQqlZ4YOPeWIU3CI03vMafp A+8lBF86dXspPTlNmn/XSIqpYv2crkOWIZFKW/GqeSiHwoajiNtvdvvLC0ZFuL7hcMHQD/ahZ8vf a+c8O64WF9VsqhDMSLu0EPvI1pLKWVyj6JPFl4YD57JcXzWU3swJMxL5pPkzwjGU9EFUMdnRmNXD oWEmxVUgmku0cb4yUHynkHG4BBCg+LVnz3GHY5scB9bemvqdfpVH2BCbrclBm2Rzrw9XCdWEx9cU fwNo4w6agw0LMYIDbDCCA2gCAQEwgZMwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENv bSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYD VQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQICP3sw CQYFKw4DAhoFAKCCAa0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcN MTUxMDI2MTc1MjEyWjAjBgkqhkiG9w0BCQQxFgQUv7ZppXwnAGaPrsp1ot1D14kqOTgwgaQGCSsG AQQBgjcQBDGBljCBkzCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0 Q29tIENsYXNzIDIgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgI/ezCBpgYLKoZIhvcN AQkQAgsxgZaggZMwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYD VQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENv bSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQICP3swDQYJKoZIhvcNAQEB BQAEggEAdP8RxZ9FbYpc11jNOWyz1vdGBRYyq+vRc9jjkvaUA8F/y4oCv7moIq2it+PvnB13HaPJ l03I+Pb60JODAMuR+gHJvXgwR6D++kmrGXEL2TtxDG7mMxPDd3t7uvpmdCNf6/Ii6Sncc00bx2dw 9b1V2MwN5QSqvV9xtTcJuHh27coFuZ+GgedNunGxLSzS6lxH1vYc9iq6TTD3SyUml4pwaFcZ8UvO cNAtr3ubz3oAYMBoYOkXwGL9FfWlK1dAVQTGur9nKcLjOr/lnot2H3sWKDNmbVLN9QEgQwqick+I eJJN99R9qZjUMNwcyLdFH5kEExickuquwHzcMp8INJ674wAAAAAAAA== --Apple-Mail=_38199BAD-5092-438B-96AC-B4AA72718EA0--