From owner-freebsd-questions@freebsd.org Thu Dec 10 11:55:20 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E934647E8E7 for ; Thu, 10 Dec 2020 11:55:20 +0000 (UTC) (envelope-from jerry@seibercom.net) Received: from mail-il1-x134.google.com (mail-il1-x134.google.com [IPv6:2607:f8b0:4864:20::134]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CsC601ylBz3pvH for ; Thu, 10 Dec 2020 11:55:20 +0000 (UTC) (envelope-from jerry@seibercom.net) Received: by mail-il1-x134.google.com with SMTP id k8so5017880ilr.4 for ; Thu, 10 Dec 2020 03:55:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=reply-to:from:to:subject:date:message-id:thread-index :content-language:mime-version; bh=6NR12xoGl5H3McTh29P4tU5xkN+2WSk+Mse6i6o6Lps=; b=CLJWwGLJrYCIxPMVkRngeD5aExAsELYoqgqlkrngTuWTUYIzVv5TNB7wsZtEjZMaqY wpuAz07G61KRouTMJIdv8b5TwRlo5BRz+GkMPd/INDZBF49Og0iOqDz4cOmz2tPDa/kK S8z+6ev2eeumcQzI+JLkfRMWDl28+md2yKvp0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:reply-to:from:to:subject:date:message-id :thread-index:content-language:mime-version; bh=6NR12xoGl5H3McTh29P4tU5xkN+2WSk+Mse6i6o6Lps=; b=Fe48lwUKqsFxKR/XeowqSlW4JwAa8ykQwMNSWKrvypqvDErRyVtBFP6ucHUMkw4N2a RZA5VEl2vbpimmJ7oatE1cShm16EJkbEZ/qqiVQ80vyps6btR/IQIpbaPb0fTa1DqGSX rtLbZ5PTou0H11cgfiXRrysJJRZvbjobVrATgUbJ/vJTShn4UPbkQlMIh4+E8U41JdQ5 WYb2Xv+bjHasaSiCQWDh5osQO9iNOgqoH7NptqQjqw4iLhOQCBritva6Kr3vHAd7zkDk xwTLY2DPX+prVzE6/1yYEpNtZusMBYs6y+1/3FaeuYaGJWDypYVOFqqE5IX+1hsBRUaV BSZg== X-Gm-Message-State: AOAM531nhxbrseNBwiTpRTAO120CaF3QLexEwYSN7RfXRU8rBBRLemdr t0jmRDTLx1rM16AP+TSuaZGOzmr1JrCiGg== X-Google-Smtp-Source: ABdhPJy0lXgdsqIpyHi4uE/QblZRrTEPmvS06bLc4TKdoVsGAE7RapIMOX2kkDp12meOpnVKmwc2wQ== X-Received: by 2002:a92:a804:: with SMTP id o4mr8762163ilh.125.1607601318829; Thu, 10 Dec 2020 03:55:18 -0800 (PST) Received: from scorpio.seibercom.net (cpe-174-109-231-236.nc.res.rr.com. [174.109.231.236]) by smtp.gmail.com with ESMTPSA id x2sm2568359ior.42.2020.12.10.03.55.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Dec 2020 03:55:17 -0800 (PST) Received: from Gerard5000 (zeus.seibercom.net [192.168.1.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: jerry@seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 4CsC5v6dSlz1450 for ; Thu, 10 Dec 2020 06:55:15 -0500 (EST) Reply-To: "FreeBSD" From: To: "'FreeBSD'" Subject: Patches for OpenSSL Date: Thu, 10 Dec 2020 06:55:15 -0500 Message-ID: <267201d6ceeb$52ffcaa0$f8ff5fe0$@seibercom.net> X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdbO6zCMfQJfS1t8QAytOsMERBaJ7Q== Content-Language: en-us MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="=-=9oPTO9+BRHk/IS=-=" X-Rspamd-Queue-Id: 4CsC601ylBz3pvH X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=pass header.d=seibercom.net header.s=google header.b=CLJWwGLJ; dmarc=none; spf=pass (mx1.freebsd.org: domain of jerry@seibercom.net designates 2607:f8b0:4864:20::134 as permitted sender) smtp.mailfrom=jerry@seibercom.net X-Spamd-Result: default: False [-0.60 / 15.00]; HAS_REPLYTO(0.00)[freebsd-questions@freebsd.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; RCVD_COUNT_THREE(0.00)[4]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[seibercom.net:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[174.109.231.236:received]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; REPLYTO_EQ_TO_ADDR(5.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RBL_DBL_DONT_QUERY_IPS(0.00)[2607:f8b0:4864:20::134:from]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[seibercom.net:s=google]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[seibercom.net]; RCPT_COUNT_ONE(0.00)[1]; SPAMHAUS_ZRD(0.00)[2607:f8b0:4864:20::134:from:127.0.2.255]; FROM_NO_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::134:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2020 11:55:21 -0000 This is a multipart message in MIME format. --=-=9oPTO9+BRHk/IS=-= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I just read "FreeBSD Security Advisory FreeBSD-SA-20:33.openssl". I found t= he following part of the message quite troubling. =20 "Note: The OpenSSL project has published publicly available patches for ver= sions included in FreeBSD 12.x. This vulnerability is also known to affect= OpenSSL versions included in FreeBSD 11.4. However, the OpenSSL project i= s only giving patches for that version to premium support contract holders.= The FreeBSD project does not have access to these patches and recommends = ..." =20 Exactly why doesn't FreeBSD have access to the above mentioned 'patches'? I= s this purely a financial matter? If so, then exactly how much are we talki= ng about here? For one, I would be too interested in knowing the specifics = regarding FreeBSD's inability to gain access to these patches. =20 --=20 Jerry =20 --=-=9oPTO9+BRHk/IS=-= Content-Type: application/pgp-signature; name="openpgp-digital-signature.asc" Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEELeCiu2K+9VmEYYgTgHBP8gv9FXcFAl/SDKIACgkQgHBP8gv9 FXfKPgwAqMHOJvG5WZzuEkRj+ydbPK2sIeRDiGbgMjq5hvse2jKiiVLTJqPJBuZn wbD4SiwYDVJSYI2z/ngfllCmbrPTOxpT3gJhiREKwcyGCqi0tGSoM6RS6lRBnHp6 nbmNhW0cGjjWa9bQB8kBH+qMqjNbZnn60m3OBYLqw2E0MgC8VDvTwLytgFDNsVuv RDSNTuIoFkCPAxIf+md1BZe/pRtf9gQ/zPEfMKuA7YiXwgjIrsDkSMYeeeReZc1q q2cN0q1EIt7MZgVAUxHTdgFPEJw+Bh4Pg9M3731Oat4PkgKJvpyq3k9zQdCsNVYE vtRqSur1W0fPOHLCY1GRuytSsXkPQrPo4F5zYXtx7k3Dm/qcamIPFsDrTR9exfBE +hY/GDK5syjQJV1MmujXFs25DL4eJK0uG3N19TaTYDB+nVkiv+n0Jb9N3gZ/LdwB PehyqUbd6vjp8KjwzwsJrHLnKHr8kU9caBlITuCK3qf4oDPKjX5HVMi+V08/fHLq ZhltFfJP =IkD0 -----END PGP SIGNATURE----- --=-=9oPTO9+BRHk/IS=-=--