possibly silly question regarding freebsd-update

[Guido Falsi]

On 30/03/21 15:35, tech-lists wrote:
> Hi,
> 
> Recently there was
> https://lists.freebsd.org/pipermail/freebsd-security/2021-March/010380.html
> about openssl. Upgraded to 12.2-p5 with freebsd-update and rebooted.
> 
> What I'm unsure about is the openssl version.
> Up-to-date 12.1-p5 instances report OpenSSL 1.1.1h-freebsd  22 Sep 2020
> 
> Up-to-date stable/13-n245043-7590d7800c4 reports OpenSSL 1.1.1k-freebsd
> 25 Mar 2021
> 
> shouldn't the 12.2-p5 be reporting openssl 1.1.1k-freebsd as well?
> 

No, as you can see in the commit in the official git [1] while for 
current and stable the new upstream version of openssl was imported for 
the release the fix was applied without importing the new release and 
without changing the reported version of the library.

So with 12.2p5 you do get the fix but don't get a new version of the 
library.


[1] 
https://cgit.freebsd.org/src/commit/?h=releng/12.2&id=af61348d61f51a88b438d41c3c91b56b2b65ed9b


-- 
Guido Falsi <mad at madpilot.net>