From owner-freebsd-questions@FreeBSD.ORG Wed Aug 11 23:21:38 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 40CAA16A4CF for ; Wed, 11 Aug 2004 23:21:38 +0000 (GMT) Received: from grog.secure-computing.net (grog.secure-computing.net [63.228.14.241]) by mx1.FreeBSD.org (Postfix) with ESMTP id BF5BD43D1D for ; Wed, 11 Aug 2004 23:21:37 +0000 (GMT) (envelope-from ecrist@secure-computing.net) Received: from Nomad (nat-server.secure-computing.net [63.228.14.245]) (authenticated bits=0)i7BNLDDV016277; Wed, 11 Aug 2004 18:21:13 -0500 (CDT) (envelope-from ecrist@secure-computing.net) From: "Eric Crist" To: "'Paul Schmehl'" , "'Rail mail'" , Date: Wed, 11 Aug 2004 18:09:09 -0500 Message-ID: <06fc01c47ff8$38756090$6401a8c0@Nomad> X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2616 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 In-Reply-To: Importance: Normal X-Virus-Scanned: clamd / ClamAV version 0.74, clamav-milter version 0.74a on grog.secure-computing.net X-Virus-Status: Clean Subject: RE: upgrade X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Aug 2004 23:21:38 -0000 Paul Schmehl wrote: > --On Wednesday, August 11, 2004 12:59:46 AM -0500 Eric Crist > wrote: >> >> The difference between a binary upgrade and an upgrade via CVS or >> cvsup is the time between creation of the sources. Binary upgrades >> generally come out durning major releases, for example, from 4.9 to >> 4.10. Any security patches added between that time were only >> available with a CVS/cvsup upgrade, followed by a system rebuild. >> > This is simply not true. You can upgrade all the sources using > freebsd-update. Look in /usr/ports/security/freebsd-update. > I use this on > production servers now to lessen downtime. All you have to > do is a fetch, > then an install, then reboot, and you're done. On a production webserver > getting millions of hits a month, this is a godsend. > > Paul Schmehl (pauls@utdallas.edu) > Adjunct Information Security Officer > The University of Texas at Dallas > AVIEN Founding Member > http://www.utdallas.edu/ir/security/ My bad, I wasn't aware of this software. I stand corrected. Thanks! Found on Conan O'Brian: Children's books written by celebrities; By Mel Gibson: Jesus Christ and the Terrible, Horrible, No Good, Very Bad Day. ----- Keep your powder dry and your pecker hard and the world WILL turn. ----- Eric F Crist