Re: Unable to apply errata EN-26:15 (OpenSSL)

np <[email protected]> Fri, 12 Jun 2026 20:55:30 +0200
Newsgroups gmane.os.freebsd.stable
Message-ID <[email protected]>
I was surprised that even gpatch would not accept this 27mb-super-patch.

As I'm using fossil and not git for my tree I did not try git-patch this time. But it seems that its content can be produced by computing a diff between tags  freebsd-15.0-p9 and freebsd-15.0-p10.

Ideally, OpenSSL should be updated more often, not only on CVE announces.

Another caveat is that EN-26:15 and SA-26:35, both OpenSSL-related, were published the same day.

I know that most people are using git. But I got once again a source tree corrupted last week (llama.cpp.git) without git reporting any problem.. so I tried a different way (src.txz + all patches).

I understand that git-diff is the most easy way to update that thing, but it is sad that we cannot use BSD tools or the tools of the base system to update our OS.

Le 12 juin 2026 19:11:01 GMT+02:00, [email protected] a écrit :
>Dave Cottlehuber wrote on Fri, 12 Jun 2026 11:17:36 +0200 (CEST):
>> $ git clone --single-branch -b releng/15.0 https://git.freebsd.org/src.git /usr/src
>
>At the risk of stating the obvious, the EN-26:15 patch is already included here.
>
>> $ fetch https://security.FreeBSD.org/patches/EN-26:15/openssl-15.0.patch -o - | patch --dry-run
>
>> patch: **** malformed patch at line 618620:  */
>
>The patch is broken. Have a look at said line, you'll notice instantly.
>
>Kind regards
>Helge
>