Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Oct 2003 14:00:36 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Antoine Jacoutot <ajacoutot@lphp.org>
Cc:        Kris Kennaway <kris@obsecurity.org>
Subject:   Re: ports security updates branch
Message-ID:  <20031017130036.GA2337@happy-idiot-talk.infracaninophile.co.uk>
In-Reply-To: <3F8FD0DD.3040404@lphp.org>
References:  <3F8F9E9C.1070909@lphp.org> <20031017084758.GB3259@rot13.obsecurity.org> <3F8FD0DD.3040404@lphp.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Oct 17, 2003 at 01:22:05PM +0200, Antoine Jacoutot wrote:
> Kris Kennaway wrote:
> >>The reason I'm asking this is that I don't want to update my ports=20
> >>everytime a new version comes out... except if it has a security issue.
> >
> >
> >FreeBSD doesn't provide this.  Since our ports collection is about 5
> >times the size of OpenBSD's it's too much work.
>=20
> Oh I know that :)
> Ok, I can totally understand why it does not exist then.
> However, is there a way to know if one of my installed packages has a=20
> security alert ? I guess not... but we never know...

Subscribe to freebsd-security@... -- FreeBSD security notices cover
problems with ported applications, as do security alerts when the
software in question appears in both ports and the base system.

Security notices tend to come out fairly infrequently and gather
together notices about several different problems.  Other ways of
finding out about potential problems are to subscribe to such mailing
lists as Bugtraq (see http://www.securityfocus.com/) and development
mailing lists for individual software packages.

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK

--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQE/j+f0dtESqEQa7a0RAkH4AJ9/sOZoZ1vAwjKbzmTSVOmCeOd57QCaA9eR
doY23rsP6yWpQLMdS25fMrc=
=4KPu
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031017130036.GA2337>