Solved No updates needed to update system

[Del.Mar]

Hi mates!
Try to update my vpn box from 13.1-RELEASE-p3 to 13.1-RELEASE-p4 with freebsd-update tool and I see strange behavior

root@vpnbox:/usr/src # uname -srm
FreeBSD 13.1-RELEASE-p3 amd64
root@vpnbox:/usr/src # freebsd-update fetch
Looking up update.FreeBSD.org mirrors... 2 mirrors found.
Fetching metadata signature for 13.1-RELEASE from update1.freebsd.org... done.
Fetching metadata index... done.
Fetching 2 metadata files... done.
Inspecting system... done.
Preparing to download files... done.

No updates needed to update system to 13.1-RELEASE-p4.
root@vpnbox:/usr/src # freebsd-update install
No updates are available to install.
Run '/usr/sbin/freebsd-update fetch' first.

I didn't changes any config files.
Also

root@vpnbox:/ # cat /var/run/os-release
NAME=FreeBSD
VERSION="13.1-RELEASE-p4"
VERSION_ID="13.1"
ID=freebsd
ANSI_COLOR="0;31"
PRETTY_NAME="FreeBSD 13.1-RELEASE-p4"
CPE_NAME="cpe:/o:freebsd:freebsd:13.1"
HOME_URL="https://FreeBSD.org/"
BUG_REPORT_URL="https://bugs.FreeBSD.org/"
root@vpnbox:/ # uname -a
FreeBSD vpnbox 13.1-RELEASE-p3 FreeBSD 13.1-RELEASE-p3 GENERIC amd64

 

[drhowarddrfine]

Is p4 out? I just upgraded to p3. It will say that because there is no p4 yet.

 

[Del.Mar]

Is p4 out? I just upgraded to p3. It will say that because there is no p4 yet.

root@vpnbox:/ # ee /usr/src/UPDATING

20221116:
        13.1-RELEASE-p4 FreeBSD-SA-22:14.heimdal

        Multiple vulnerabilities in Heimdal [SA-22:14.heimdal]

 

[T-Daemon]

Try to update my vpn box from 13.1-RELEASE-p3 to 13.1-RELEASE-p4 with freebsd-update tool and I see strange behavior

root@vpnbox:/usr/src # uname -srm
FreeBSD 13.1-RELEASE-p3 amd64

That's OK. Your system is already at patch level "-p4", the userland that is.

uname(1) displays the kernel version, which wasn't updated by the latest security advisory 2022-11-15 FreeBSD-SA-22:14.heimdal, only userland was updated. Userland patch levels are not displayed by uname(1).

Run instead freebsd-version -kru

freebsd-version(1)

     -k          Print the version and patch level of the installed kernel.
                 Unlike uname(1), if a new kernel has been installed but the
                 system has not yet rebooted, freebsd-version will print the
                 version and patch level of the new kernel.

     -r          Print the version and patch level of the running kernel.
                 Unlike uname(1), this is unaffected by environment variables.

     -u          Print the version and patch level of the installed userland.
                 These are hardcoded into freebsd-version during the build.

 

[Del.Mar]

Run instead

root@vpnbox:/usr/src # freebsd-version -kru
13.1-RELEASE-p3
13.1-RELEASE-p3
13.1-RELEASE-p4

So, do I need update kernel from source?

 

[T-Daemon]

So, do I need update kernel from source?

No, you don't need to do nothing. The kernel wasn't updated by the latest patch level. Your system is perfectly fine updated.

 

[richardtoohey2]

If you don't see "kernel" as one of the upgraded files then the kernel version won't change. So I'm doing a p3 to p4 upgrade here:

# freebsd-update fetch
src component not installed, skipped
Looking up update.FreeBSD.org mirrors... 2 mirrors found.
Fetching metadata signature for 13.1-RELEASE from update1.freebsd.org... done.
...
Fetching 53 patches.....10....20....30....40....50. done.
Applying patches... done.
The following files will be updated as part of updating to
13.1-RELEASE-p4:
/bin/freebsd-version
/usr/bin/asn1_compile
/usr/bin/hxtool
...
/usr/lib/libwind_p.a
/usr/libexec/hpropd
/usr/libexec/ipropd-master
/usr/libexec/kadmind
/usr/libexec/kcm
/usr/sbin/kstash
/usr/sbin/ktutil

So you can see freebsd-version got upgraded (so it will report p4) but there's no kernel file in there, so it won't have an updated version number.