[matt at openssl.org: OpenSSL Security Advisory]

[Morgan Wesström]

> % uname -a
> FreeBSD desktop 13.0-STABLE FreeBSD 13.0-STABLE #1 
> stable/13-n247002-bd0ad8209d5: Mon Aug 30 14:29:25 BST 2021
> 
> % openssl version
> OpenSSL 1.1.1k-freebsd  24 Aug 2021
> 
> and from a recently updated 13.0-p4 machine kept up-to-date with freebsd-update:
> 
> FreeBSD 13.0-RELEASE-p4 #0: Tue Aug 24 07:33:27 UTC 2021 
> root at amd64-builder.daemonology.net:/usr/obj/usr/src/amd64.amd64/sys/GENERIC  amd64
> 
> % openssl version
> OpenSSL 1.1.1k-freebsd  24 Aug 2021
> 
> Why is freebsd at 1.1.1k and not 1.1.1l ?

It seems FreeBSD chose to patch version 1.1.1k rather than to import the whole 
1.1.1l. The patch was made in the following commit:

https://cgit.freebsd.org/src/commit/crypto/openssl?h=releng/13.0&id=2261c814b7fa4730f308b476eff1afb0dcdf35ec

You can see in the last patch on that page that the version was changed from 
"OpenSSL 1.1.1k-freebsd  25 Mar 2021" to "OpenSSL 1.1.1k-freebsd  24 Aug 2021" 
for the patched version which matches your second output. Why your first output 
example has the same date without being -p4 is beyond me though.

Regards
Morgan