Here is a quick overview of how to make sure you are running the latest versions of your installed software. Note that for critical packages (any piece of software that listens for connections) you should be subscribed to mailing lists that will keep you informed about security patches and exploit workarounds.
First, make sure that your ports collection is up to date.
# cvsup -g /usr/local/etc/ports-supfile
# portsdb -Uu
This will connect to a FreeBSD server and patch your ports collection with the latest version info, and then update the local INDEX.db file.
Now use portupgrade to upgrade packages as necessary:
# portupgrade -aiRr[P]
This will upgrade all ports (-a) interactively (-i) -- meaning it will confirm that you want to upgrade before actually doing so. It will upgrade recursively (-Rr) so that everything is up to date and matching.
If -P is used, portupgrade will attempt to fetch binary packages where available. This is generally a good thing, except where you need custom configuration options, in which case you need to compile from source.
By Chris Snyder on January 16, 2003 at 11:06pm