From owner-freebsd-questions Mon Mar 3 7:38:40 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D24EA37B401 for ; Mon, 3 Mar 2003 07:38:38 -0800 (PST) Received: from lv.raad.tartu.ee (lv.raad.tartu.ee [194.126.106.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 38C6843FCB for ; Mon, 3 Mar 2003 07:38:37 -0800 (PST) (envelope-from toomas.aas@raad.tartu.ee) Received: Message by Barricade lv.raad.tartu.ee with ESMTP id h23FcXt08158; Mon, 3 Mar 2003 17:38:34 +0200 Message-Id: <200303031538.h23FcXt08158@lv.raad.tartu.ee> Received: from INFO/SpoolDir by raad.tartu.ee (Mercury 1.48); 3 Mar 03 17:38:12 +0200 Received: from SpoolDir by INFO (Mercury 1.48); 3 Mar 03 17:37:57 +0200 From: "Toomas Aas" Organization: Tartu City Government To: "Stephen Hoover" , questions@freebsd.org Date: Mon, 3 Mar 2003 17:37:51 +0200 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Updating parts of the system.. In-reply-to: <00e801c2df71$047ca010$6702a8c0@cutlass442> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi! > I was wondering if it was feasible to update just parts of the FreeBSD > system without updating the whole thing...for instance the recent OpenSSL > update - is it possible to update just OpenSSL on say a FreeBSD 4.3 box > without updating the whole system? If the update is w.r.t a FreeBSD security advisory, then it is generally possible to update just the "faulty" part of the system. This involves downloading a patch from FreeBSD FTP server, applying it to your existing sources and rebuilding the necessary parts of the system. The exact instructions are given within the security advisory itself. HOWEVER: the patches are not guaranteed to work on a version as old as 4.3. The oldest version which seems to be currently supported by FreeBSD security officer is 4.6. Another thing to consider is that sometimes you'll need to build the entire world + kernel after applying the patch anyway. This is the case with FreeBSD-SA-03:02 (the recent OpenSSL advisory). In such case I personally find it more sensible to cvsup the sources to latest RELENG_4_X and rebuild the world + kernel from there. -- Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/ * Someday we'll look back on all this and plow into a parked car. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message