FreeBSD Security Advisory FreeBSD-SA-16:17.openssl

[Mark Felder]

On Wed, May 4, 2016, at 21:32, Mel Pilgrim wrote:
> On 5/4/2016 3:55 PM, FreeBSD Security Advisories wrote:
> > FreeBSD-SA-16:17.openssl                                    Security Advisory
> >                                                           The FreeBSD Project
> 
> Something seems amiss with the update servers:
> 
> # freebsd-version
> 10.3-RELEASE-p1
> # freebsd-update fetch
> src component not installed, skipped
> Looking up update.FreeBSD.org mirrors... 4 mirrors found.
> Fetching metadata signature for 10.3-RELEASE from update6.freebsd.org... 
> done.
> Fetching metadata index... done.
> Inspecting system... done.
> Preparing to download files... done.
> 
> No updates needed to update system to 10.3-RELEASE-p0.
> #
> 
> Tried after emptying /var/db/freebsd-update
>

The freebsd-update mirrors do not have the latest updates for amd64 on
any supported RELEASE. The i386 bits are there, but not amd64. I do not
know if generating them failed or if something else happened that
prevented their deployment. It appears the updates are pulled not
pushed, so as soon as they are available on the master mirror they
should be distributed within a few minutes.

I have emailed secteam@ about it but have not yet heard back.


-- 
  Mark Felder
  ports-secteam member
  feld at FreeBSD.org