From owner-freebsd-questions@FreeBSD.ORG Mon Jun 16 21:05:59 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 901428D6; Mon, 16 Jun 2014 21:05:59 +0000 (UTC) Received: from mail-vc0-x233.google.com (mail-vc0-x233.google.com [IPv6:2607:f8b0:400c:c03::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3BBC92E39; Mon, 16 Jun 2014 21:05:59 +0000 (UTC) Received: by mail-vc0-f179.google.com with SMTP id id10so5479912vcb.38 for ; Mon, 16 Jun 2014 14:05:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=utlunCV2SaBWXrYDfDLhrFR/Gd/nneI0Fr7Dd1VDzLo=; b=Iix0DWrpvHBZdvHhtwCC8yx8fpkvQJbny1VQP5ka15kXJC1sXtPVzWckUr02MXFciS 76MRoPMOebQ733mQUW4oWm/7XCw2fp1HDcj/1uscH1GAoDYqbKqnIpqWyEZBd+R9DPKl RMSf2VysowOL629zHRhRSWk6zK+l4X/olTo6XTNh992xJtiiCMmJhuSoRHP4rwR+BqPB ZBhTLh0DWX5D2Dv0U9KGXQmsUmUT9Mai559t9ZEmCZAEjQsc/UkKsb2LvEtKmrG5XyAN 3NXapuRYGfauSqCpGoQS8EdHEtwesX/fc307PuRLVr9SQfQVoJLzIzDRKDN9JLmnXvRQ cl6A== MIME-Version: 1.0 X-Received: by 10.52.121.112 with SMTP id lj16mr3741242vdb.29.1402952758300; Mon, 16 Jun 2014 14:05:58 -0700 (PDT) Sender: christopher.maness@gmail.com Received: by 10.58.191.35 with HTTP; Mon, 16 Jun 2014 14:05:58 -0700 (PDT) In-Reply-To: References: <20140615022626.7111be2c.freebsd@edvax.de> <20140615100636.GB23568@slackbox.erewhon.home> <539DCF00.2030601@FreeBSD.org> Date: Mon, 16 Jun 2014 14:05:58 -0700 X-Google-Sender-Auth: 9unpxCQCqeuKYG5D7GMRZD5ciAM Message-ID: Subject: Re: Port Changes FAQ From: Chris Maness To: Matthew Seaman , "freebsd-questions@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jun 2014 21:05:59 -0000 What version of FreeBSD implements the now pkg (8)? Thanks, Chris Maness On Sun, Jun 15, 2014 at 2:03 PM, Chris Maness wrote: > Thanks, Matt for illuminating this process. > > Chris > > On Sun, Jun 15, 2014 at 9:51 AM, Matthew Seaman wrote: >> On 15/06/2014 14:38, Chris Maness wrote: >>> Thanks, guys. I like the new pkg (8) command. Will they be >>> recompiling ports whenever they have been patched against >>> vulnerabilities? >> >> The official pkg sets get updated on a weekly basis -- a snap shot of >> the ports tree is taken on a Wednesday, and packages are built from >> that, which generally takes a few days, so new packages are usually >> available on Saturday. >> >> The worst case scenario is that a vulnerability is announced on a >> Wednesday after the weekly build has begun, so the fixed package >> wouldn't then appear in the repos until about 10 days later. >> >> For a really serious vulnerability with exploits in the wild, I'm sure >> the usual package building schedule would be modified. It's also the >> case that portmgr (who are in charge of building the packages) work >> closely with secteam and ports-secteam so can get advanced warning >> before vulnerabilities are published. Meaning they could have fixed >> packages ready when the announcement is made. But that depends on many >> outside factors, so cannot be relied upon. >> >> Cheers, >> >> Matthew >> >> -- >> Dr Matthew J Seaman MA, D.Phil. >> PGP: http://www.infracaninophile.co.uk/pgpkey >> >>