From owner-freebsd-questions@FreeBSD.ORG Thu Jan 29 12:36:49 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1FDE81065672 for ; Thu, 29 Jan 2009 12:36:49 +0000 (UTC) (envelope-from wmoran@potentialtech.com) Received: from mail.potentialtech.com (internet.potentialtech.com [66.167.251.6]) by mx1.freebsd.org (Postfix) with ESMTP id E5CC78FC0A for ; Thu, 29 Jan 2009 12:36:48 +0000 (UTC) (envelope-from wmoran@potentialtech.com) Received: from working (pool-72-95-226-5.pitbpa.ftas.verizon.net [72.95.226.5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.potentialtech.com (Postfix) with ESMTPSA id 1A9DCEBC0A; Thu, 29 Jan 2009 07:36:48 -0500 (EST) Date: Thu, 29 Jan 2009 07:36:47 -0500 From: Bill Moran To: Nerius Landys Message-Id: <20090129073647.c34e36dc.wmoran@potentialtech.com> In-Reply-To: <560f92640901281511m55e3adc8l75d2b28b381920c8@mail.gmail.com> References: <560f92640901281416m784f85c4h9014c5e834980893@mail.gmail.com> <20090128175705.3677bafb.wmoran@potentialtech.com> <560f92640901281511m55e3adc8l75d2b28b381920c8@mail.gmail.com> X-Mailer: Sylpheed 2.5.0 (GTK+ 2.12.11; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: security holes X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Jan 2009 12:36:49 -0000 Nerius Landys wrote: > > > Ascertaining what security holes will affect your system is complicated. > > If you have to ask this question, then I recommend that you apply all > > security updates immediately and always assume that every vulnerability > > is a potential problem for you. > > Because 7.0 updates will no longer be made about a month from now, I > guess this means that I should upgrade to 7.1? That would be my opinion. The good news is that you have a month to plan and schedule the upgrade, and the change from 7.0 to 7.1 is pretty minor. I upgraded 3 systems with no manual intervention aside from mergemaster. -- Bill Moran http://www.potentialtech.com