Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Oct 2005 10:12:50 -0700
From:      David Kirchner <dpk@dpk.net>
To:        Cody Holland <cholland@redmoonbroadband.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Patch vs. Upgrade
Message-ID:  <35c231bf0510121012m1541b79ao7634243ed9eaf529@mail.gmail.com>
In-Reply-To: <4B3EE484EEA4F344BBB62F831648998646786A@corpsrv.RedMoon.local>
References:  <4B3EE484EEA4F344BBB62F831648998646786A@corpsrv.RedMoon.local>

next in thread | previous in thread | raw e-mail | index | archive | help
On 10/12/05, Cody Holland <cholland@redmoonbroadband.com> wrote:
> I'm still pretty new to the BSD world and wanted to throw out a question
> to see what kind of responses I get.  What is everyones take on what to
> do when security vulnerabities are discovered.  Do you upgrade your
> source (not always the easiest thing to do) or patch.  What are the pros
> and cons of patching?

We patch the source and rebuild the bare minimum of software.
Rebuilding world (ie: everything) is an extreme step which, logically,
should only be taken as a last resort. At least, in a production
environment. If this is just a toy computer, or a desktop, rebuilding
world is probably not so bad.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35c231bf0510121012m1541b79ao7634243ed9eaf529>