From owner-svn-doc-head@freebsd.org Mon Oct 10 21:32:13 2016 Return-Path: Delivered-To: svn-doc-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BFFD9C0CFBB; Mon, 10 Oct 2016 21:32:13 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7522438E; Mon, 10 Oct 2016 21:32:13 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u9ALWC63083817; Mon, 10 Oct 2016 21:32:12 GMT (envelope-from glebius@FreeBSD.org) Received: (from glebius@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u9ALWC8X083814; Mon, 10 Oct 2016 21:32:12 GMT (envelope-from glebius@FreeBSD.org) Message-Id: <201610102132.u9ALWC8X083814@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: glebius set sender to glebius@FreeBSD.org using -f From: Gleb Smirnoff Date: Mon, 10 Oct 2016 21:32:12 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r49488 - head/share/security/advisories X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Oct 2016 21:32:13 -0000 Author: glebius (src committer) Date: Mon Oct 10 21:32:12 2016 New Revision: 49488 URL: https://svnweb.freebsd.org/changeset/doc/49488 Log: Fix small mistakes in the recent advisories: - Affected versions in SA-16:27 - Patching instructions in SA-16:31 Modified: head/share/security/advisories/FreeBSD-SA-16:27.openssl.asc head/share/security/advisories/FreeBSD-SA-16:31.libarchive.asc Modified: head/share/security/advisories/FreeBSD-SA-16:27.openssl.asc ============================================================================== --- head/share/security/advisories/FreeBSD-SA-16:27.openssl.asc Mon Oct 10 18:18:10 2016 (r49487) +++ head/share/security/advisories/FreeBSD-SA-16:27.openssl.asc Mon Oct 10 21:32:12 2016 (r49488) @@ -11,7 +11,7 @@ Category: contrib Module: openssl Announced: 2016-10-10 Credits: OpenSSL Project -Affects: All supported versions of FreeBSD. +Affects: FreeBSD 11.0 Corrected: 2016-09-26 14:30:19 UTC (stable/11, 11.0-STABLE) 2016-09-26 20:26:19 UTC (releng/11.0, 11.0-RELEASE-p1) CVE Name: CVE-2016-7052 @@ -114,19 +114,18 @@ VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- -Version: GnuPG v2.1.13 (FreeBSD) -iQIcBAEBCgAGBQJX+0OlAAoJEO1n7NZdz2rnEPYQAOewieypFMknEi5Q02IBVhcC -Bs1sczFLXaSz+4c9lNRi+m6Q5TXbW0MM9ZhZDnoLOXZ9OZ7DsQ0OVJcmWPHCSTkT -WAlZgiB5B2xtZpLUNi0XAVPyegh+YxWCKa5mq/e4gC7BL+QhtTQqIlzsNylBDcI0 -2Tp5fPfO3vIJlSwPpsUA2peYlm2c75/dusE0+bvWnqickWbEmFdCAd8rzTLrsm9R -w5essD2o6BzFPA9j+3X/LNaMI6ZKKa4EkaXXB42KHruDfNTV8dmYL/LLxWs6aj1f -Li++71GPh3aZZCA5SCo6NYdI25kg4xORZzqUmYzT856kdmpaemLd8oVT8/ojOCTX -CoNtA9yVphhYgfSGLy2BIs0u7U3H16SVjZ1oC5MjTAY6kUsEDt6x2vlKOt5452yN -3v2fHf9I8/ibgo4d4ovpGGzvrj/8EfodmDLhjYP5RcwZH4FW1jCUzXTflsYmPWMi -8+COC+K19MNIXR0M8ajs2M8z2ILc3pOUZ1sdrNhU1jEIyYCl8EDMEU0Bc13XlUKS -UE92RKfxIAMh+Zyu44++8UizfOorBVKhQVd+9NthMnfXW6xlnwujjbabam8k2E5V -Za4sBQ57JvL9aKrsbmB/hhVnxXE6jYqtp7tagXK+wwULO1SarpRp7HENd50ggH5l -yu2DM4rkIcwzTaJEdvyT -=5rNc +iQIcBAEBCgAGBQJX/AhFAAoJEO1n7NZdz2rndIsP/0i/NvoofoAiKWlEmH5KEhFX +mwzwvXFt8YFuwXNQ4g8E2QTmX6O5k8s5N5AMZWyfWtPE1NzZbyDMo4JMgHeRjS/e +qlVywAX4wEQ7M71xQilpGivgK5TGil9g75AgoDV/+oL+c9UMNQafBc2hc0AYPV/b +XnErz/I/E7nA4jC5UTo1xg1CRFOx7ZvpMC+WPzFohNzRtfLV42jf2jL+V5AlddlE +yEht85v5zcyvhgS6j8i8d8w/XfCf3P/rt45lz2ENuyFQMfNraMmgdUjeBjyHW4/9 +Aiv0NIqMd/J6mPEdZwV5uw/w54dufmfj5TH0kQZvat4bhTLOSKGPievf0AU5dehM +Znrrg+jnb2MaDy5KMXDKW/QYHt1kDRO4+1v0APfuIxeejQljRsb/Z3pKa9h4m/8v +jsT2lfAoOShAYEBV0HmFyAjsSbd0X8JgW7mMMk3cHvqqqg8+e49YHmoLOchpMOgS +8acyuraij7IK4Ag+2KcwaPmC3ov4RzLM+6mCbT0xlEbB3qxlgo81aVhDxQIWobLT ++uIJFwgWGNvKWY/XSTB70JscbsG9YeJSxV4lc3biHbbadZNmGYfz2KkwqUZSh83+ +9sq1SD0LRJgiAFuPl20DmUDyG/unif7wIHjmiIUMn0UyBOnVKVVQyPz9XXCuZHtB +Tt0MBVzJ4LLIbxR80ojw +=bU3Q -----END PGP SIGNATURE----- Modified: head/share/security/advisories/FreeBSD-SA-16:31.libarchive.asc ============================================================================== --- head/share/security/advisories/FreeBSD-SA-16:31.libarchive.asc Mon Oct 10 18:18:10 2016 (r49487) +++ head/share/security/advisories/FreeBSD-SA-16:31.libarchive.asc Mon Oct 10 21:32:12 2016 (r49488) @@ -73,9 +73,20 @@ FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. -# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive.patch -# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive.patch.asc -# gpg --verify libarchive.patch.asc +[FreeBSD 10.1] +# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.1.patch +# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.1.patch.asc +# gpg --verify libarchive-10.1.patch.asc + +[FreeBSD 10.2] +# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.2.patch +# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.2.patch.asc +# gpg --verify libarchive-10.2.patch.asc + +[FreeBSD 10.3] +# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.3.patch +# fetch https://security.FreeBSD.org/patches/SA-16:31/libarchive-10.3.patch.asc +# gpg --verify libarchive-10.3.patch.asc b) Apply the patch. Execute the following commands as root: @@ -118,19 +129,18 @@ VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- -Version: GnuPG v2.1.13 (FreeBSD) -iQIcBAEBCgAGBQJX+0OrAAoJEO1n7NZdz2rnkaAP/i5Njok8Lg3ogwRGVo/HVQfA -AzRz2oQ5oAuwZhmpkQ3CzHArRsaTGuKK5C1SNJpmEDuq5XM2u5Td2ph/R5ry0fwF -7B58Ci+o7ngRWtJ/N8dYk3cXfg0sjPZKDO1otIyfh8HF3UAq5uB3/w/8UFOpqcxQ -guMKahd/r9PnfrD8GtS+t/2V+KHInNH0J4YD/+hoqcdZPzMKtlE5D5OjqOov9rVn -myQwAuN+w2buPj2gXSuubq5wTNFOvj8u06mVpRj+0X0VoybdN5cohuqSx7s4vlw+ -/qV7gT2993aijXp43dGGSUeuGl1ZbrKp233vntkIYrsjJzaw56YMHL3ushopGGhj -OfC/ilXmsUjrlHgCrWpMiTuN7cdWDXrpMnaf4c99yMxdYUuRtbbnVthdOpZB8iOt -7xeVnvHiYTYbQu+4xy4SPOWqPLOnrbwVqIocXU1QjWJice5A3EU/mSAd2IpX04a2 -prdlaGxBNZlziLgzsZoiER+5u0S3owbx7y2SVhMEslHyrRQ92X7SZjfu4NrvlX5k -Dw6xjpHD51pshj4GXTPuznbCyd8246u1fRnH3fnlNLhz5/XhrYbG+OVQ9WDbnX2C -6SzS/oOcjA9qcq1+Ghmz6G7S2MuWZ0XcKfzV0ygX2RZEhU1p0rZfsF/2cGrKIGY1 -JguXI1tZdrjfSZisAI+l -=vqSJ +iQIcBAEBCgAGBQJX/AiFAAoJEO1n7NZdz2rnruoQALOIEQZB6+C2K2AssEosLgMC +IMuQ2dmgA/B5VQCbhM+o/ZBUahlaoXojRVwpOFEMdOOixZthdOhv3RuuMG6HKvBM +ja9+MRNHAY9wXLSkdED5kfRRvbrvLy/OW6wJ1HDiib3rlB5OGgTQmwLyBr3r9VYL +IOxyHCnogGibRHj2RNnbjmeZ1snwoM3WGcmopINiHsmczr6WPO9nFBtXN4udHKjd +aZJ5Qk/QKakeU3tIR9G+7tNKpUaMlxl+20PJbCuGNrwlG7cXon1CAsVSNGCk2oD/ +s7gK2zmXInWDVX55fJx5iZyG+gavyOHu8Ecd47cHd57rFdX858A7giOsgeAzQ6b+ +5baWwqLcGvYT1vyJeCKs1glRC8ybMY/SCm8DSD43JrUPjXMFot9zzdZwAyb34INV +T+4FrnoUtJ6l33Emnwg6qr+4PFoTULXnsrKr5KEg7Dv4+iWrLjVj3S3aCViML32F +MR5bhB3Ju9AR2FKQiCuBwSnuD/NI9bE6jcv730LUuM8FIuRplx8wZaWJIxgJtF1O +lev0hjAfxD65F+/cxLkGCHumRd62L1kWJfoxjUhjQ5j5dDfYcGHn5JFwtAT/nvc2 +vLsSVzSrLq4nlNmIJFUik1tJ5joloETSaPXkUfIvkKYltzXHNYTzHTcyACLT+Soi +b6XjoO4+rpEcoYuQ1You +=y6xQ -----END PGP SIGNATURE-----