Date: Tue, 17 Feb 2015 07:49:31 +0800 From: Ben Woods <woodsb02@gmail.com> To: John Goerzen <jgoerzen@complete.org> Cc: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: Re: pkg audit finds updates, but pkg upgrade doesn't Message-ID: <CAOc73CDN0S2k-DXjG9Uf1Wngsei-PgkHu9ubCziCEczmKQsG7A@mail.gmail.com> In-Reply-To: <loom.20150217T002048-206@post.gmane.org> References: <loom.20150216T230822-352@post.gmane.org> <20150216224753.73143297@curlew.lan> <loom.20150217T002048-206@post.gmane.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Not sure there is a "right way", but your options are essentially: - wait for the new package - compile the new port on the server it will be installed on - compile the new port on another server using "make package" (make sure all other ports and options are the same) - set up your own poudriere system and use that as your repository I have personally done the last one, and it isn't as hard as you might think. I did it more for testing the ports I maintain, but getting security updates sooner is an equally good reason. Regards, Ben On Tuesday, February 17, 2015, John Goerzen <jgoerzen@complete.org> wrote: > Mike Clarke <jmc-freebsd2 <at> milibyte.co.uk> writes: > > > > > xorg-server was modified on Thursday Feb 12th at 19:58:41 to fix this > > vulnerability > > > < > https://svnweb.freebsd.org/ports/head/x11-servers/xorg-server/Makefile?view=log > > > > . > > The latest package builds started on Wednesday 11th > > <http://beefy2.isc.freebsd.org/#latest_builds>; and > > <http://beefy1.isc.freebsd.org/#latest_builds>. It looks like they all > > used snapshots from before the new version was available except for > > 84i386-default and 84amd64-default. The next package build should start > > in a couple of days time on Wednesday 18th. > > > > Ah, ok, so packages are built once a week then? What do people do when > they > want their security updates faster, if they were using packages instead of > ports primarily? I suppose one could install the port, but then wouldn't > that typically pull in a lot of development dependencies that might not > otherwise have been needed on a system? > > In my particular case, I do have /usr/ports installed but didn't use it for > this. I'm not super-worried about this particular issue, but in general, > what's the right way to proceed? > > Thanks, > > John > > _______________________________________________ > freebsd-questions@freebsd.org <javascript:;> mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org <javascript:;>" > -- -- From: Benjamin Woods woodsb02@gmail.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOc73CDN0S2k-DXjG9Uf1Wngsei-PgkHu9ubCziCEczmKQsG7A>