Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Aug 2021 21:32:22 +0200
From:      =?UTF-8?Q?Morgan_Wesstr=c3=b6m?= <freebsd-database@pp.dyndns.biz>
To:        freebsd-questions@freebsd.org
Subject:   Re: [matt@openssl.org: OpenSSL Security Advisory]
Message-ID:  <f408d58a-c375-fdb0-40e7-eb1e513dbaac@pp.dyndns.biz>
In-Reply-To: <YS0FoRh3EQbWVX4n@cloud.zyxst.net>
References:  <YSUBXKAghkzBDWgF@doctor.nl2k.ab.ca> <f23e4aa5-1265-727f-2590-0f09a31db559@langille.org> <YS0FoRh3EQbWVX4n@cloud.zyxst.net>

next in thread | previous in thread | raw e-mail | index | archive | help

> % uname -a
> FreeBSD desktop 13.0-STABLE FreeBSD 13.0-STABLE #1 
> stable/13-n247002-bd0ad8209d5: Mon Aug 30 14:29:25 BST 2021
> 
> % openssl version
> OpenSSL 1.1.1k-freebsd  24 Aug 2021
> 
> and from a recently updated 13.0-p4 machine kept up-to-date with freebsd-update:
> 
> FreeBSD 13.0-RELEASE-p4 #0: Tue Aug 24 07:33:27 UTC 2021 
> root@amd64-builder.daemonology.net:/usr/obj/usr/src/amd64.amd64/sys/GENERIC  amd64
> 
> % openssl version
> OpenSSL 1.1.1k-freebsd  24 Aug 2021
> 
> Why is freebsd at 1.1.1k and not 1.1.1l ?

It seems FreeBSD chose to patch version 1.1.1k rather than to import the whole 
1.1.1l. The patch was made in the following commit:

https://cgit.freebsd.org/src/commit/crypto/openssl?h=releng/13.0&id=2261c814b7fa4730f308b476eff1afb0dcdf35ec

You can see in the last patch on that page that the version was changed from 
"OpenSSL 1.1.1k-freebsd  25 Mar 2021" to "OpenSSL 1.1.1k-freebsd  24 Aug 2021" 
for the patched version which matches your second output. Why your first output 
example has the same date without being -p4 is beyond me though.

Regards
Morgan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?f408d58a-c375-fdb0-40e7-eb1e513dbaac>