From: Warren Block on
Marek <lm7(a)poczta.fm.REMOVETHIS> wrote:
> Hi,
>
> As in subject, I installed 7.2 from DVD (later I'd like to make
> available this host in Internet with SSH + VPN + maybe some web server).
>
> After installation of few packages portaudit showed (of course) that
> some of them should be updated due to security issues.
>
> AFAIK, I have 2 options now (after "portsnap fetch update"):
>
> 1. portupgrade -car
> This will take ages to compile (my machine is not so modern).
>
> 2. portupgrade, but only for affected packages
> I am not an expert in FreeBSD's security and I'd like to stay on the
> safe side, of course. I'd like to go "this way", BUT...is this really
> safe (perspective: dependencies)?

#2, but use the -r option to portupgrade.

--
Warren Block * Rapid City, South Dakota * USA
From: Marek on
Warren Block wrote:
> Marek <lm7(a)poczta.fm.REMOVETHIS> wrote:
>> Hi,
>>
>> As in subject, I installed 7.2 from DVD (later I'd like to make
>> available this host in Internet with SSH + VPN + maybe some web server).
>>
>> After installation of few packages portaudit showed (of course) that
>> some of them should be updated due to security issues.
>>
>> AFAIK, I have 2 options now (after "portsnap fetch update"):
>>
>> 1. portupgrade -car
>> This will take ages to compile (my machine is not so modern).
>>
>> 2. portupgrade, but only for affected packages
>> I am not an expert in FreeBSD's security and I'd like to stay on the
>> safe side, of course. I'd like to go "this way", BUT...is this really
>> safe (perspective: dependencies)?
>
> #2, but use the -r option to portupgrade.

Thanks!

Marek