pkg audit finds updates, but pkg upgrade doesn't

Ben Woods woodsb02 at
Mon Feb 16 23:49:34 UTC 2015

Not sure there is a "right way", but your options are essentially:
- wait for the new package
- compile the new port on the server it will be installed on
- compile the new port on another server using "make package" (make sure
all other ports and options are the same)
- set up your own poudriere system and use that as your repository

I have personally done the last one, and it isn't as hard as you might
think. I did it more for testing the ports I maintain, but getting security
updates sooner is an equally good reason.


On Tuesday, February 17, 2015, John Goerzen <jgoerzen at> wrote:

> Mike Clarke <jmc-freebsd2 <at>> writes:
> >
> > xorg-server was modified on Thursday Feb 12th at 19:58:41 to fix this
> > vulnerability
> >
> <
> >
> > .
> > The latest package builds started on Wednesday 11th
> > <> and
> > <>. It looks like they all
> > used snapshots from before the new version was available except for
> > 84i386-default and 84amd64-default. The next package build should start
> > in a couple of days time on Wednesday 18th.
> >
> Ah, ok, so packages are built once a week then?  What do people do when
> they
> want their security updates faster, if they were using packages instead of
> ports primarily?  I suppose one could install the port, but then wouldn't
> that typically pull in a lot of development dependencies that might not
> otherwise have been needed on a system?
> In my particular case, I do have /usr/ports installed but didn't use it for
> this.  I'm not super-worried about this particular issue, but in general,
> what's the right way to proceed?
> Thanks,
> John
> _______________________________________________
> freebsd-questions at <javascript:;> mailing list
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at <javascript:;>"


From: Benjamin Woods
woodsb02 at

More information about the freebsd-questions mailing list