DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Security

OpenBSD Security Functionally paranoid!

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 21st April 2018
thefronny thefronny is offline
Port Guard
 
Join Date: Oct 2008
Posts: 26
Default New patches, but...

I received email notice this morning of four patches for OpenBSD. I logged in to my server and pulled them in using links but two of them are just empty html docs that go to an empty page. This was certainly not the plan, right?
Reply With Quote
  #2   (View Single Post)  
Old 21st April 2018
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 6,254
Default

Quote:
Originally Posted by thefronny View Post
I received email notice this morning of four patches for OpenBSD. I logged in to my server and pulled them in using links but two of them are just empty html docs that go to an empty page. This was certainly not the plan, right?
There are valid syspatch(8) files for all four patches. My guess is that the website updates lag the announcement Emails.
Reply With Quote
  #3   (View Single Post)  
Old 21st April 2018
thefronny thefronny is offline
Port Guard
 
Join Date: Oct 2008
Posts: 26
Default

Quote:
Originally Posted by jggimi View Post
There are valid syspatch(8) files for all four patches. My guess is that the website updates lag the announcement Emails.
Thanks. That certainly would explain it, I just happened to be looking at my mail queue and saw the mails hit. Notification before patches are actually online, isn't that a bit horse before the cart?
Reply With Quote
  #4   (View Single Post)  
Old 21st April 2018
thefronny thefronny is offline
Port Guard
 
Join Date: Oct 2008
Posts: 26
Default

This is after DL, again, of 002_ and 003_ from www.openbsd.org -> Security -> 6.3

-rw-r--r-- 1 root wheel 15640 Apr 14 17:32 001_perl.patch.sig
-rw-r--r-- 1 root wheel 427 Apr 21 11:30 002_arp.patch.sig
-rw-r--r-- 1 root wheel 427 Apr 21 10:17 002_arp.patch.sig.broken
-rw-r--r-- 1 root wheel 427 Apr 21 11:31 003_libtls.patch.sig
-rw-r--r-- 1 root wheel 427 Apr 21 10:17 003_libtls.patch.sig.broken
-rw-r--r-- 1 root wheel 2369 Apr 21 10:17 004_gif.patch.sig
-rw-r--r-- 1 root wheel 997 Apr 21 10:18 005_httpd.patch.sig

If you're seeing files jggimi what am *I* seeing?
Reply With Quote
  #5   (View Single Post)  
Old 21st April 2018
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 6,254
Default

I've seen it the other way, too, where the syspatch files have not completed distribution before the announcement. Usually this completes within hours.

All I can say is that like you, I'm just a user. As this forum is unaffiliated with the Project, you'll have to ask the Project about their governance of break/fix announcements and the Project's website. You could start by asking tj@ -- just reply to one of the announcement Emails.
Reply With Quote
  #6   (View Single Post)  
Old 21st April 2018
thefronny thefronny is offline
Port Guard
 
Join Date: Oct 2008
Posts: 26
Default

Quote:
Originally Posted by jggimi View Post
I've seen it the other way, too, where the syspatch files have not completed distribution before the announcement. Usually this completes within hours.

All I can say is that like you, I'm just a user. As this forum is unaffiliated with the Project, you'll have to ask the Project about their governance of break/fix announcements and the Project's website. You could start by asking tj@ -- just reply to one of the announcement Emails.
I did that earlier, after a respectful delay. It'll clear up.

thanks!
Reply With Quote
  #7   (View Single Post)  
Old 21st April 2018
TronDD TronDD is offline
Package Pilot
 
Join Date: Sep 2014
Posts: 172
Default

This was reported to misc@. 002 and 003 where mis-numbered and it has been fixed.

EDIT: I might have misread your last post. Was it you who reported it to misc@? In which case, ignore me, you already know.
Reply With Quote
Reply

Tags
patch

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenBSD Kernel patches available as a result of DEFCON ocicat News 0 5th August 2017 12:16 AM
Security VMware patches NFC, Java and SSL J65nko News 0 22nd February 2013 08:27 PM
Security PostgreSQL patches XML flaws J65nko News 0 17th August 2012 09:56 PM
Mozilla patches Firefox and Thunderbird J65nko News 0 29th April 2011 06:54 PM
FreeBSD 7.0 patches PeterSteele FreeBSD Installation and Upgrading 8 15th November 2008 01:01 AM


All times are GMT. The time now is 06:21 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick