看板 FB_security 關於我們 聯絡資訊
----- Original Message ----- From: "Mohacsi Janos" <mohacsi@niif.hu> To: <freebsd-security@freebsd.org> Sent: Wednesday, May 14, 2014 11:43 AM Subject: freebsd-update on Re: FreeBSD Security Advisory FreeBSD-SA-14:10.openssl > Dear All, > The freebsd-update a bit suspicious: > " > root@skye:/usr/home/mohacsi # freebsd-update fetch > Looking up update.FreeBSD.org mirrors... 5 mirrors found. > Fetching metadata signature for 10.0-RELEASE from update3.freebsd.org... > done. > Fetching metadata index... done. > Fetching 2 metadata patches.. done. > Applying metadata patches... done. > Inspecting system... done. > Preparing to download files... done. > Fetching 11 patches.....10 done. > Applying patches... done. > > The following files will be updated as part of updating to > 10.0-RELEASE-p3: > /bin/freebsd-version > /boot/kernel/ciss.ko > /boot/kernel/ciss.ko.symbols > /boot/kernel/kernel > /boot/kernel/kernel.symbols > /usr/lib/libssl.a > /usr/lib/libssl.so.7 > /usr/lib/libssl_p.a > /usr/lib32/libssl.a > /usr/lib32/libssl.so.7 > /usr/lib32/libssl_p.a > " > > It seems to me the ciss(4) also updated. Is it intentional? Is it > harmless? ciss(4) was included in a seperate errata notice this morning which detailed how it could cause corruption, so I would expect that updating it is indeed correct. Regards Steve _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"