pkg audit finds updates, but pkg upgrade doesn't

[Ben Woods]

Not sure there is a "right way", but your options are essentially:
- wait for the new package
- compile the new port on the server it will be installed on
- compile the new port on another server using "make package" (make sure
all other ports and options are the same)
- set up your own poudriere system and use that as your repository

I have personally done the last one, and it isn't as hard as you might
think. I did it more for testing the ports I maintain, but getting security
updates sooner is an equally good reason.

Regards,
Ben

On Tuesday, February 17, 2015, John Goerzen <jgoerzen at complete.org> wrote:

> Mike Clarke <jmc-freebsd2 <at> milibyte.co.uk> writes:
>
> >
> > xorg-server was modified on Thursday Feb 12th at 19:58:41 to fix this
> > vulnerability
> >
> <
> https://svnweb.freebsd.org/ports/head/x11-servers/xorg-server/Makefile?view=log
> >
> > .
> > The latest package builds started on Wednesday 11th
> > <http://beefy2.isc.freebsd.org/#latest_builds> and
> > <http://beefy1.isc.freebsd.org/#latest_builds>. It looks like they all
> > used snapshots from before the new version was available except for
> > 84i386-default and 84amd64-default. The next package build should start
> > in a couple of days time on Wednesday 18th.
> >
>
> Ah, ok, so packages are built once a week then?  What do people do when
> they
> want their security updates faster, if they were using packages instead of
> ports primarily?  I suppose one could install the port, but then wouldn't
> that typically pull in a lot of development dependencies that might not
> otherwise have been needed on a system?
>
> In my particular case, I do have /usr/ports installed but didn't use it for
> this.  I'm not super-worried about this particular issue, but in general,
> what's the right way to proceed?
>
> Thanks,
>
> John
>
> _______________________________________________
> freebsd-questions at freebsd.org <javascript:;> mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org <javascript:;>"
>


-- 

--
From: Benjamin Woods
woodsb02 at gmail.com