Re: FreeBSD Errata Notice FreeBSD-EN-26:15.openssl

On 6/9/26 17:15, Craig Leres wrote:
> On 6/9/26 16:12, FreeBSD Errata Notices wrote:
>> =============================================================================
>> FreeBSD-EN-26:15.openssl                                        Errata 
>> Notice
>>                                                            The FreeBSD 
>> Project
>>
>> Topic:          Update OpenSSL to 3.0.20 and 3.5.6
> After updating I was quite surprised to see this:
> 
>      % /usr/bin/openssl version
>      OpenSSL 3.0.20 7 Apr 2026 (Library: OpenSSL 3.0.20 7 Apr 2026)
> 
> I expected to see 3.5.6 reported!?!?

   https://www.freebsd.org/security/patches/EN-26:15/openssl-14.4.patch 
shows crypto/openssl/VERSION as only updating the patch # and not the 
major/minor version # (as I assume this is where the version # comes 
from) though the patch is huge so expectations+confusion could be 
expected. I haven't yet looked into why its so much larger than the last 
openssl commit 
https://cgit.freebsd.org/src/commit/?h=releng/14.4&id=1929d9e173e5c959be4343ddc68f75f28ac88e5c 
but assume its combining something else.

   /usr/src/UPDATING I initially read "Update OpenSSL to 3.0.20 and 
3.5.6. [EN-26:15.openssl]" as saying it updated from 3.0 to 3.5 which is 
not what it actually says; it says OpenSSL versions are upgraded 
to...lists both 3.0 and 3.5 versions. I'd debate that 14 doesn't need 
anything said about 3.5 if 14 doesn't get 3.5.

> Am I missing something subtle here?
> 
>          Craig
> 
> % uname -a
> FreeBSD mote.xse.com 14.4-RELEASE-p6 FreeBSD 14.4-RELEASE-p6 r36 LBL amd64
> 
>