From owner-freebsd-questions@FreeBSD.ORG Wed Aug 26 16:08:49 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C8AE0106568D for ; Wed, 26 Aug 2009 16:08:49 +0000 (UTC) (envelope-from jhelfman@e-e.com) Received: from mail.experts-exchange.com (mail.experts-exchange.com [64.156.132.251]) by mx1.freebsd.org (Postfix) with ESMTP id B5AD38FC26 for ; Wed, 26 Aug 2009 16:08:49 +0000 (UTC) Received: from eggman.experts-exchange.com (unknown [72.29.180.81]) by mail.experts-exchange.com (Postfix) with ESMTP id DE02B4A44633 for ; Wed, 26 Aug 2009 09:08:44 -0700 (PDT) Received: by eggman.experts-exchange.com (sSMTP sendmail emulation); Wed, 26 Aug 2009 09:08:17 -0700 Date: Wed, 26 Aug 2009 09:08:17 -0700 From: Jason To: freebsd-questions@freebsd.org Message-ID: <20090826160816.GA35964@eggman.experts-exchange.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline X-Operating-System: FreeBSD 7.1-RELEASE-p6 EGGMAN X-Living-The-Dream: I love the SLO Life! User-Agent: Mutt/1.5.20 (2009-06-14) Subject: question about security updates X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2009 16:08:49 -0000 I was wondering in the case of openssl: http://security.freebsd.org/advisories/FreeBSD-SA-09:08.openssl.asc Corrected: 2009-04-22 14:07:14 UTC (RELENG_7, 7.2-PRERELEASE) 2009-04-22 14:07:14 UTC (RELENG_7_2, 7.2-RC2) 2009-04-22 14:07:14 UTC (RELENG_7_1, 7.1-RELEASE-p5) 2009-04-22 14:07:14 UTC (RELENG_7_0, 7.0-RELEASE-p12) 2009-04-22 14:07:14 UTC (RELENG_6, 6.4-STABLE) 2009-04-22 14:07:14 UTC (RELENG_6_4, 6.4-RELEASE-p4) 2009-04-22 14:07:14 UTC (RELENG_6_3, 6.3-RELEASE-p10) CVE Name: CVE-2009-0590 I see that in release 7_2, that this was corrected. Does this mean that if I were to download the 7.2 iso, that this patch would already be applied to this release? To me, it seems that anything that isn't *-RELEASE-p? would be applied to the distributed iso, but I could be wrong. Thanks, Jason