Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 27 Nov 2016 10:11:48 +0100
From:      "Herbert J. Skuhra" <herbert@mailbox.org>
To:        <freebsd-questions@freebsd.org>
Subject:   Re: Dealing with (multiple) pkgs with security vulnerabilities.
Message-ID:  <868ts5uw17.wl-herbert@mailbox.org>
In-Reply-To: <CAAdA2WMFMYT8ss2DqqdeFWmv5atU3cj7DxYHiPCNBBB_TYxEgw@mail.gmail.com>
References:  <CAAdA2WMFMYT8ss2DqqdeFWmv5atU3cj7DxYHiPCNBBB_TYxEgw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Odhiambo Washington wrote:
> 
> Hi,
> Part of my security run output contains a long list of packages with
> vulnerabilities.
> 'pkg audit -F' returns a listing of these pkgs with enough details, but
>  pkg update && pkg upgrade returns nothing so I suppose there is a better
> way to deal with these.

Output of 'uname -a' is missing.

- you are running a version that is EOL (e.g.: FreeBSD 8.x)
  => update base first and then try pkg update/upgrade again
- you are running a platform (e.g. arm) for which packages are not built/updated
- the url in your repository file (e.g. /etc/pkg/FreeBSD.conf) is wrong

> I know I can manually do 'make -C /path/to/port/directory clean reinstall
> clean', but that is so manual and tirng even just for 10 pkgs to be updated.
> 
> What is the easiest way of doing a batch update for all the listed pkgs?

- checkout/update /usr/ports with svn(lite) or portsnap
- install ports-mgmt/portmaster
- run 'portmaster -a'

You haven't updated for a long time (more than a year). So maybe it's
better to remove all installed ports (pkg delete -a) and reinstall
them one by one.

--
Herbert



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?868ts5uw17.wl-herbert>