Date: Mon, 3 Mar 2003 17:37:51 +0200 From: "Toomas Aas" <toomas.aas@raad.tartu.ee> To: "Stephen Hoover" <shooverfbn@442spot.com>, questions@freebsd.org Subject: Re: Updating parts of the system.. Message-ID: <200303031538.h23FcXt08158@lv.raad.tartu.ee> In-Reply-To: <00e801c2df71$047ca010$6702a8c0@cutlass442>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi! > I was wondering if it was feasible to update just parts of the FreeBSD > system without updating the whole thing...for instance the recent OpenSSL > update - is it possible to update just OpenSSL on say a FreeBSD 4.3 box > without updating the whole system? If the update is w.r.t a FreeBSD security advisory, then it is generally possible to update just the "faulty" part of the system. This involves downloading a patch from FreeBSD FTP server, applying it to your existing sources and rebuilding the necessary parts of the system. The exact instructions are given within the security advisory itself. HOWEVER: the patches are not guaranteed to work on a version as old as 4.3. The oldest version which seems to be currently supported by FreeBSD security officer is 4.6. Another thing to consider is that sometimes you'll need to build the entire world + kernel after applying the patch anyway. This is the case with FreeBSD-SA-03:02 (the recent OpenSSL advisory). In such case I personally find it more sensible to cvsup the sources to latest RELENG_4_X and rebuild the world + kernel from there. -- Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/ * Someday we'll look back on all this and plow into a parked car. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200303031538.h23FcXt08158>