pkg audit finds updates, but pkg upgrade doesn't

[John Goerzen]

Mike Clarke <jmc-freebsd2 <at> milibyte.co.uk> writes:

> 
> xorg-server was modified on Thursday Feb 12th at 19:58:41 to fix this
> vulnerability
>
<https://svnweb.freebsd.org/ports/head/x11-servers/xorg-server/Makefile?view=log>
> .
> The latest package builds started on Wednesday 11th
> <http://beefy2.isc.freebsd.org/#latest_builds> and
> <http://beefy1.isc.freebsd.org/#latest_builds>. It looks like they all
> used snapshots from before the new version was available except for
> 84i386-default and 84amd64-default. The next package build should start
> in a couple of days time on Wednesday 18th.
> 

Ah, ok, so packages are built once a week then?  What do people do when they
want their security updates faster, if they were using packages instead of
ports primarily?  I suppose one could install the port, but then wouldn't
that typically pull in a lot of development dependencies that might not
otherwise have been needed on a system?

In my particular case, I do have /usr/ports installed but didn't use it for
this.  I'm not super-worried about this particular issue, but in general,
what's the right way to proceed?

Thanks,

John