Unexplained update to /boot/boot1.efi and 2 others by freebsd-update

Gleb Smirnoff glebius at FreeBSD.org
Tue Aug 23 00:28:24 UTC 2016


  Martin,

On Mon, Aug 22, 2016 at 03:15:47PM +0100, Martin Simmons wrote:
M> Running freebsd-update to convert 10.1-RELEASE-p36 to -p37 updates 3 efi files
M> in /boot, but they are not mentioned in any security advisory or errata notice
M> that I can find and no corresponding source files are updated.  This is
M> repeatable on several unrelated systems so I don't think my files have been
M> corrupted.
M> 
M> Is this expected?

The freebsd-update build code attempts to extract and ignore timestamps in order
to determine whether files are 'really' changing between builds; unfortunately these
particular files contain a build artifact which the freebsd-update code was not
able to handle, thus resulting in them being incorrectly identified as needing to be
distributed.

So, this shouldn't have happened. But don't worry the files aren't forged and they
do originate from the official freebsd-update server.

-- 
Totus tuus, Glebius.


More information about the freebsd-security mailing list