Patch vs. Upgrade

David Kirchner dpk at dpk.net
Wed Oct 12 10:13:08 PDT 2005


On 10/12/05, Cody Holland <cholland at redmoonbroadband.com> wrote:
> I'm still pretty new to the BSD world and wanted to throw out a question
> to see what kind of responses I get.  What is everyones take on what to
> do when security vulnerabities are discovered.  Do you upgrade your
> source (not always the easiest thing to do) or patch.  What are the pros
> and cons of patching?

We patch the source and rebuild the bare minimum of software.
Rebuilding world (ie: everything) is an extreme step which, logically,
should only be taken as a last resort. At least, in a production
environment. If this is just a toy computer, or a desktop, rebuilding
world is probably not so bad.


More information about the freebsd-questions mailing list