Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Feb 2015 07:49:31 +0800
From:      Ben Woods <woodsb02@gmail.com>
To:        John Goerzen <jgoerzen@complete.org>
Cc:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: pkg audit finds updates, but pkg upgrade doesn't
Message-ID:  <CAOc73CDN0S2k-DXjG9Uf1Wngsei-PgkHu9ubCziCEczmKQsG7A@mail.gmail.com>
In-Reply-To: <loom.20150217T002048-206@post.gmane.org>
References:  <loom.20150216T230822-352@post.gmane.org> <20150216224753.73143297@curlew.lan> <loom.20150217T002048-206@post.gmane.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Not sure there is a "right way", but your options are essentially:
- wait for the new package
- compile the new port on the server it will be installed on
- compile the new port on another server using "make package" (make sure
all other ports and options are the same)
- set up your own poudriere system and use that as your repository

I have personally done the last one, and it isn't as hard as you might
think. I did it more for testing the ports I maintain, but getting security
updates sooner is an equally good reason.

Regards,
Ben

On Tuesday, February 17, 2015, John Goerzen <jgoerzen@complete.org> wrote:

> Mike Clarke <jmc-freebsd2 <at> milibyte.co.uk> writes:
>
> >
> > xorg-server was modified on Thursday Feb 12th at 19:58:41 to fix this
> > vulnerability
> >
> <
> https://svnweb.freebsd.org/ports/head/x11-servers/xorg-server/Makefile?view=log
> >
> > .
> > The latest package builds started on Wednesday 11th
> > <http://beefy2.isc.freebsd.org/#latest_builds>; and
> > <http://beefy1.isc.freebsd.org/#latest_builds>. It looks like they all
> > used snapshots from before the new version was available except for
> > 84i386-default and 84amd64-default. The next package build should start
> > in a couple of days time on Wednesday 18th.
> >
>
> Ah, ok, so packages are built once a week then?  What do people do when
> they
> want their security updates faster, if they were using packages instead of
> ports primarily?  I suppose one could install the port, but then wouldn't
> that typically pull in a lot of development dependencies that might not
> otherwise have been needed on a system?
>
> In my particular case, I do have /usr/ports installed but didn't use it for
> this.  I'm not super-worried about this particular issue, but in general,
> what's the right way to proceed?
>
> Thanks,
>
> John
>
> _______________________________________________
> freebsd-questions@freebsd.org <javascript:;> mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe@freebsd.org <javascript:;>"
>


-- 

--
From: Benjamin Woods
woodsb02@gmail.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOc73CDN0S2k-DXjG9Uf1Wngsei-PgkHu9ubCziCEczmKQsG7A>