From owner-freebsd-questions@FreeBSD.ORG Tue May 5 12:55:15 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9FF6C106566B for ; Tue, 5 May 2009 12:55:15 +0000 (UTC) (envelope-from sonicy@otenet.gr) Received: from aiolos.otenet.gr (aiolos.otenet.gr [83.235.67.30]) by mx1.freebsd.org (Postfix) with ESMTP id 0C7438FC0A for ; Tue, 5 May 2009 12:55:14 +0000 (UTC) (envelope-from sonicy@otenet.gr) Received: from atlantis.dyndns.org (athedsl-4471802.home.otenet.gr [94.71.123.234]) by aiolos.otenet.gr (8.13.8/8.13.8/Debian-3) with ESMTP id n45CtCvQ020155; Tue, 5 May 2009 15:55:12 +0300 Message-ID: <4A003730.10702@otenet.gr> Date: Tue, 05 May 2009 15:55:12 +0300 From: Manolis Kiagias User-Agent: Thunderbird 2.0.0.21 (X11/20090414) MIME-Version: 1.0 To: Daniel Underwood References: In-Reply-To: X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: Using portsuprade only for security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2009 12:55:15 -0000 Daniel Underwood wrote: > I ran a portsupgrade scan, and was presented with a long list of > installed ports and whether an update was available. In general, I > prefer not to update ports/packages between FreeBSD releases. An > obvious exception to this general rules is the patching of security > vulnerabilities; of course not all available updates are security > fixes. > > So my question is: how or where can I monitor security > vulnerabilities? Or, how can I keep my system up-to-date with respect > to security, without applying every non-security update? > > Thanks, > Daniel > User ports-mgmt/portaudit This will report any installed port with security issues. It will even run from periodic, sending this info via email.