NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Security advisory points to non-existing files on nyftp.netbsd.org?



Hi!

The recent NetBSD Security Advisory SA2014-006

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-006.txt.asc

gives instructions on how to patch (which is really unacceptably
complicated, but that's a different story ...) for OpenSSL
vulnerabilities. One is instructed to download files from daily builds
on nyftp.netbsd.org.

    Solutions and Workarounds
    ...
    - From tarballs:
    ...
    To obtain fixed binaries, fetch the appropriate base.tgz and comp.tgz
    from a daily build later than the fix dates, from
    http://nyftp.netbsd.org/pub/NetBSD-daily/<rel>/<date>/<arch>/binary/sets/
    with a date 20140607* or larger, and your release version and architecture
    (e.g. 
http://nyftp.netbsd.org/pub/NetBSD-daily/netbsd-6-1/201406070100Z/amd64/binary/sets/),
    and then extract the files:
    ...
    ...

It's just that I cannot find any builds for stable branches (e.g.,
netbsd-6-1) any more.  They were there past Monday (Jun 30), but now I
only find binaries for HEAD.

Does anyone have any information on

a) Where to find said tarballs?

b) What happened to the existing ones?

c) How to get the SA-instructions adjusted to avoid that more people run
   into this problem?

                                Best regards,
                                  /Liman

(Using my old autonomica.se address. Autonomica has been merged with
Netnod. I need to change my subscriptions.)
#----------------------------------------------------------------------
# Lars-Johan Liman, M.Sc.               !  E-mail: liman%netnod.se@localhost
# Senior Systems Specialist             !  Tel: +46 8 - 562 860 12
# Netnod Internet Exchange, Stockholm   !  http://www.netnod.se/
#----------------------------------------------------------------------


Home | Main Index | Thread Index | Old Index