From owner-freebsd-questions@FreeBSD.ORG Mon Feb 16 23:49:34 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 01C8DD4D for ; Mon, 16 Feb 2015 23:49:34 +0000 (UTC) Received: from mail-wi0-x235.google.com (mail-wi0-x235.google.com [IPv6:2a00:1450:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7C33E3BB for ; Mon, 16 Feb 2015 23:49:33 +0000 (UTC) Received: by mail-wi0-f181.google.com with SMTP id r20so29509080wiv.2 for ; Mon, 16 Feb 2015 15:49:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=tDPhZz5uOIb+OOwE92QrfnksIn0sWFtX1DIXf2kIhi0=; b=0D78ajASDpxCe0M/EQN0uxcHpjLRN3wbG7tVZ8KCW8W4piRfF+cphQ/4+Mrsy3oXdK r/7rNIqo4efyd1RSy98V3IOcAKqYyZXGxgwjj6YbkthB8KvO3ABsu0F97CP5BbK0kV/F MKEzFpRw2c5D2m2RLiqaYKcWRK03Imv+UogQJxUnvy6deh2q7J9U0OdTC5jh2DmACrkP hnK07E3wLEJkxw1VT2fF+3CbvGwhAO0FD/iFjQ1jbLdenZtI2EA+ZkUx2K66RyZu4cnf ZXBTI3DZgzJgo2g7uty4F7FeXYQLvLaIGUPmdn7tQXbZRHpfA9N/dinGt8EkIZsGgY33 CKdA== MIME-Version: 1.0 X-Received: by 10.194.237.34 with SMTP id uz2mr54425598wjc.157.1424130571859; Mon, 16 Feb 2015 15:49:31 -0800 (PST) Received: by 10.194.241.132 with HTTP; Mon, 16 Feb 2015 15:49:31 -0800 (PST) In-Reply-To: References: <20150216224753.73143297@curlew.lan> Date: Tue, 17 Feb 2015 07:49:31 +0800 Message-ID: Subject: Re: pkg audit finds updates, but pkg upgrade doesn't From: Ben Woods To: John Goerzen Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: "freebsd-questions@freebsd.org" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Feb 2015 23:49:34 -0000 Not sure there is a "right way", but your options are essentially: - wait for the new package - compile the new port on the server it will be installed on - compile the new port on another server using "make package" (make sure all other ports and options are the same) - set up your own poudriere system and use that as your repository I have personally done the last one, and it isn't as hard as you might think. I did it more for testing the ports I maintain, but getting security updates sooner is an equally good reason. Regards, Ben On Tuesday, February 17, 2015, John Goerzen wrote: > Mike Clarke milibyte.co.uk> writes: > > > > > xorg-server was modified on Thursday Feb 12th at 19:58:41 to fix this > > vulnerability > > > < > https://svnweb.freebsd.org/ports/head/x11-servers/xorg-server/Makefile?view=log > > > > . > > The latest package builds started on Wednesday 11th > > and > > . It looks like they all > > used snapshots from before the new version was available except for > > 84i386-default and 84amd64-default. The next package build should start > > in a couple of days time on Wednesday 18th. > > > > Ah, ok, so packages are built once a week then? What do people do when > they > want their security updates faster, if they were using packages instead of > ports primarily? I suppose one could install the port, but then wouldn't > that typically pull in a lot of development dependencies that might not > otherwise have been needed on a system? > > In my particular case, I do have /usr/ports installed but didn't use it for > this. I'm not super-worried about this particular issue, but in general, > what's the right way to proceed? > > Thanks, > > John > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org " > -- -- From: Benjamin Woods woodsb02@gmail.com