Quarterly packages and security updates...

[Glen Barber]

[info@ removed, not sure why that email address was included.]

On Thu, Aug 13, 2015 at 04:20:08PM -0400, Mason Loring Bliss wrote:
> A recently quarterly report:
> 
>     https://www.freebsd.org/news/status/report-2015-04-2015-06.html
> 
> and last week's BSD Now episode both hint that quarterly packages will be the
> default for 10.2. I just looked, and sure enough:
> 
>     https://svnweb.freebsd.org/base/releng/10.2/etc/pkg/FreeBSD.conf?view=markup
> 
> So, my issue here is that I run quarterly branches, and they are awful in
> terms of security updates. With FreeBSD 10.2 imminent, are we expecting users
> to install vulnerable versions of things like Firefox right off the bat, and
> then wait for whatever fixes exist at the time the next quarterly branch is
> cut?
> 

The reason this change was made is because the quarterly package set
receives less intrusive updates, but it does still receive security
updates.

This is documented in the 10.2-RELEASE release notes, which also shows
how to change back to the 'latest' branch, if you so desire.

https://www.freebsd.org/releases/10.2R/relnotes.html#releng-changes

Glen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-security/attachments/20150813/8874924e/attachment.bin>