From owner-freebsd-questions@FreeBSD.ORG Fri Nov 11 16:35:10 2011 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D68DF1065670 for ; Fri, 11 Nov 2011 16:35:10 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3fd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id 3E4718FC08 for ; Fri, 11 Nov 2011 16:35:10 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [81.187.76.163]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.5/8.14.5) with ESMTP id pABGYtac086786 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Fri, 11 Nov 2011 16:34:55 GMT (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: OpenDKIM Filter v2.4.1 smtp.infracaninophile.co.uk pABGYtac086786 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1321029295; bh=/tpd5RDw/mxibZGNss6/nxKoiJTs/2xsMR+JBa0q+WU=; h=Message-ID:Date:From:MIME-Version:To:CC:Subject:References: In-Reply-To:Content-Type; b=cSkPPn2Gxrn6oSFu/sBsbMxElm84k/vx1SKdRr0adXOP5aRUZmx7yGWED8LA4inc1 1G4WcCqCUpCV6lpIzowbL/8+haZ389IgeLWQ66rL+4jJt7wzWB42EMmveke6WEd+ki PI8igzrAs3Hhq5HMWF49pUGy32mq3YutiV6crGz0= Message-ID: <4EBD4EA8.3000109@infracaninophile.co.uk> Date: Fri, 11 Nov 2011 16:34:48 +0000 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:8.0) Gecko/20111105 Thunderbird/8.0 MIME-Version: 1.0 To: Tom Carpenter References: <4EBD2CD8.2040209@charter.net> In-Reply-To: <4EBD2CD8.2040209@charter.net> X-Enigmail-Version: 1.3.3 OpenPGP: id=60AE908C Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig34F3B7F7944CAB0152F06728" X-Virus-Scanned: clamav-milter 0.97.3 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_FAIL autolearn=no version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on lucid-nonsense.infracaninophile.co.uk Cc: questions@freebsd.org Subject: Re: 8.2-RELEASE-p4 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Nov 2011 16:35:10 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig34F3B7F7944CAB0152F06728 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 11/11/2011 14:10, Tom Carpenter wrote: > I'm new to FreeBSD and after looking through the FreeBSD website I > think I may have answered my question, but thought I would say that > the message "No updates needed to update system to 8.2-RELEASE-p4" > seems a little contradictory: if "8.2-RELEASE-p4" isn't relevant for > my FreeBSD installation why mention it. >=20 > As far as answering my question, i.e. 'how does one install > 8.2-RELEASE-p4 on a system running 8.2-RELEASE-p3', if I understand the= > relevant security advisory, >=20 > http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc >=20 > it looks like "8.2-RELEASE-p4" is an update for source, consequently, > I'm getting the output that I am from freebsd-update because I don't > have any source installed on my system. Uh -- I think you are confused. All security patches are issued as not only as source code updates (for those that build from source) but also as compiled binary updates via freebsd-update. Judging by the output you showed, you've certainly managed to download the -p4 binary patch set. The 'No updates needed' message is just telling you you've already got all the necessary update patchsets downloaded. The next step is running: # freebsd-update install which will actually deploy those updates on your live system. Which you do mention doing. Hmmm... You aren't running a custom kernel according to your uname output, so your kernel image should have been updated. However, you would still need to reboot after installing the updates. Until you do, programs like uname that query the currently running kernel image will continue to show the old version numbers. Note that if a security update is just to some userland programs, freebsd-update won't touch the OS kernel, so the reported version number doesn't change even though the update has been applied. In these sort of cases, it's not necessary to reboot, just to restart any long running processes (if any) affected by the update. The security advisory should have more detailed instructions about exactly what to do. (The -p2 to -p3 update was like this, but the -p3 to -p4 update definitely did affect the kernel so a reboot was necessary.) > That message will go away if I edit `8.2-RELEASE-p3' to read > `8.2-RELEASE' but I'm not sure if that's the appropriate > solution...would I get the current versions of packages if I > did that? Yes -- that should be absolutely fine. All 8.x versions of the OS should be binary compatible, and any ports compiled for anything labelled 8.2-RELEASE should work irrespective of the patch level. In fact, with a very small number of exceptions, ports compiled for any OS version with a major version number of '8' should work. Exceptions are programs like eg. lsof(1) which accesses certain kernel internals in non-portable ways. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matthew@infracaninophile.co.uk Kent, CT11 9PW --------------enig34F3B7F7944CAB0152F06728 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk69Tq8ACgkQ8Mjk52CukIyYIwCgiPzD0DFcyr2kA84GDR96img9 Q54AoIIVsATF+mjGEvt594XcjwZFTZJZ =q8qW -----END PGP SIGNATURE----- --------------enig34F3B7F7944CAB0152F06728--