From owner-freebsd-questions@FreeBSD.ORG Wed Nov 19 09:22:51 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2CACD16A4CE for ; Wed, 19 Nov 2003 09:22:51 -0800 (PST) Received: from seahorse.dhapdigital.com (smtp.dhapdigital.com [209.11.154.189]) by mx1.FreeBSD.org (Postfix) with ESMTP id 654F943F85 for ; Wed, 19 Nov 2003 09:22:50 -0800 (PST) (envelope-from kevin@dhapdigital.com) Received: from ahnwoon.dhapdigital.com (ahnwoon.dhapdigital.com [209.11.154.185])hAJHMoQx032745 for ; Wed, 19 Nov 2003 09:22:50 -0800 Received: from dhap.com (isis-161.dhapdigital.com [209.11.154.161]) by ahnwoon.dhapdigital.com (8.11.6/8.11.6) with ESMTP id hAJHMnU05423 for ; Wed, 19 Nov 2003 09:22:50 -0800 Message-ID: <3FBBA719.5010404@dhap.com> Date: Wed, 19 Nov 2003 09:23:37 -0800 From: Kevin McKay User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4.1) Gecko/20031030 X-Accept-Language: en-us, en MIME-Version: 1.0 To: questions@FreeBSD.org References: <000801c3ae5b$44595cf0$0599a440@linuxops.com> <44fzgk4egj.fsf@be-well.ilk.org> In-Reply-To: <44fzgk4egj.fsf@be-well.ilk.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Security question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Nov 2003 17:22:51 -0000 So it will not just grab the latest patched binaries for 5.1? I am not sure I understand. Is it just for updating between releases and not for keeping the current release up to date? Kevin Lowell Gilbert wrote: >"Kevin McKay" writes: > > > >>I have read through the documentation but have not been able to find >>a definite answer. I am running a pretty core install of 5.1 minimal >>+ bind9, postfix, apache, ssh, no ports collection. Here is my >>question. When I run the binary update from sysinstall will that >>take care of the earlier ssh vulnerability and update apache postfix >>and bind to the most current version? >> >> > >You normally need to run the sysinstall from the version you're >updating to. You could configure your system's sysinstall to load in >the later version, and it should be compatible, but I don't know the >syntax for that offhand... > >