From owner-freebsd-stable@FreeBSD.ORG Wed May 12 08:56:17 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B854D16A4CE for ; Wed, 12 May 2004 08:56:17 -0700 (PDT) Received: from tx1.oucs.ox.ac.uk (tx1.oucs.ox.ac.uk [129.67.1.167]) by mx1.FreeBSD.org (Postfix) with ESMTP id 16B5043D5A for ; Wed, 12 May 2004 08:56:17 -0700 (PDT) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from scan1.oucs.ox.ac.uk ([129.67.1.166] helo=localhost) by tx1.oucs.ox.ac.uk with esmtp (Exim 4.24) id 1BNw5g-0002n8-Gn for stable@freebsd.org; Wed, 12 May 2004 16:56:16 +0100 Received: from rx1.oucs.ox.ac.uk ([129.67.1.165]) by localhost (scan1.oucs.ox.ac.uk [129.67.1.166]) (amavisd-new, port 25) with ESMTP id 10233-10 for ; Wed, 12 May 2004 16:56:16 +0100 (BST) Received: from gateway.wadham.ox.ac.uk ([163.1.161.253]) by rx1.oucs.ox.ac.uk with smtp (Exim 4.24) id 1BNw5g-0002n4-3O for stable@freebsd.org; Wed, 12 May 2004 16:56:16 +0100 Received: (qmail 518 invoked by uid 1004); 12 May 2004 15:56:16 -0000 Received: from colin.percival@wadham.ox.ac.uk by gateway by uid 71 with qmail-scanner-1.20 (clamscan: 0.67. sweep: 2.18/3.79. Clear:RC:1(163.1.161.131):. Processed in 0.32332 secs); 12 May 2004 15:56:16 -0000 Received: from dhcp1131.wadham.ox.ac.uk (HELO piii600.wadham.ox.ac.uk) (163.1.161.131) by gateway.wadham.ox.ac.uk with SMTP; 12 May 2004 15:56:15 -0000 Message-Id: <6.1.0.6.1.20040512165102.03fb4ef8@popserver.sfu.ca> X-Sender: cperciva@popserver.sfu.ca (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 6.1.0.6 Date: Wed, 12 May 2004 16:55:52 +0100 To: "Omar M. Nafees" From: Colin Percival In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" cc: stable@freebsd.org Subject: Re: Keeping FreeBSD up-to-date X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 May 2004 15:56:17 -0000 At 16:35 12/05/2004, Omar M. Nafees wrote: >What is the most automated way to keep the FreeBSD base up-to-date? I know >that the binary upgrade option in sysinstall can be used to upgrade the base >to the latest release... but does this take into account new Security >Advisories? No. To upgrade your -RELEASE to include security fixes, you have to update your source tree (either via cvsup or by manually downloading and applying patches) and rebuild (either world or kernel, as applicable). Instructions are included in every security advisory. Or, of course, you could use the not-officially-supported-but-used-by- over-4000-people-anyway binary update option known as FreeBSD Update. You'll find it in the ports tree as security/freebsd-update. :-) Colin Percival