From owner-freebsd-questions@FreeBSD.ORG Tue May 5 12:37:29 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EBCF51065672 for ; Tue, 5 May 2009 12:37:29 +0000 (UTC) (envelope-from djuatdelta@gmail.com) Received: from mail-bw0-f213.google.com (mail-bw0-f213.google.com [209.85.218.213]) by mx1.freebsd.org (Postfix) with ESMTP id 788ED8FC12 for ; Tue, 5 May 2009 12:37:28 +0000 (UTC) (envelope-from djuatdelta@gmail.com) Received: by bwz9 with SMTP id 9so4430847bwz.43 for ; Tue, 05 May 2009 05:37:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding; bh=Hb5dP2bH9Mf5msY96z2LHFdAaMPlv8gkoqSYTliWatA=; b=frj4H5QHho3bGLaG5JQ4sqUYl0Wv7UsRzjKduMFLGJEF1zAgR8LL6e3QWk9ztOy3jk cQ8CepXXmiZEMSfut6O8SU9k0UWr5bpVIlRCgHkv9YQZ05WBsTL1WIem8pI5ExvNXd0v izRI4cGriz/6sRNlsjYet6JqXk72QPvZNObMc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=vvixjel452Fye4Pq0Vr5wG1GeGd7bksdmPgcqOnpWC1JGGPrf9DbF1spakeawC/Yey iNgccJJpLBIqkGMf+TLPSfo2Aj6f9DRa6DdQRUCsNsY26g/MTMLimaL2iKTnDZ2kT5za FHOv4314jbztW5c4GvZ+iLU6CwL7Rp2ivvvOM= MIME-Version: 1.0 Received: by 10.103.160.3 with SMTP id m3mr20074muo.25.1241527048108; Tue, 05 May 2009 05:37:28 -0700 (PDT) Date: Tue, 5 May 2009 08:37:28 -0400 Message-ID: From: Daniel Underwood To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Using portsuprade only for security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2009 12:37:30 -0000 I ran a portsupgrade scan, and was presented with a long list of installed ports and whether an update was available. In general, I prefer not to update ports/packages between FreeBSD releases. An obvious exception to this general rules is the patching of security vulnerabilities; of course not all available updates are security fixes. So my question is: how or where can I monitor security vulnerabilities? Or, how can I keep my system up-to-date with respect to security, without applying every non-security update? Thanks, Daniel