LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   Slackware security & slackpkg ... (https://www.linuxquestions.org/questions/slackware-14/slackware-security-and-slackpkg-745386/)

joeBuffer 08-05-2009 03:48 PM
Slackware security & slackpkg ...
 
I just recently posted that I was glad that, for the time being, I could use slackpkg for security updates using Slackware.
I read that people do this.
I looked on Slackware's site, the security advisories. I used
Code:
slackpkg update
slackpkg upgrade-all
I paid close attention. I did not see it update security, like what I've read you can do with it. All it did (that I could see, and I really did pay attention) is update to the newest packages. It was just updating the program versions. I didn't see any updates that weren't a different version than what I had, because it was just the version being updated, not security updates to the version I had. I also didn't see any downloads other than the version updates, that would be security updates for the new versions, either. :confused:

Chuck56 08-05-2009 04:02 PM
I think you're confused or you've confused me. The security patches listed in the Security Advisories are normally included in the upgrade packages provided through slackpkg. Check the package versions listed in the changelog for the version your running. Keep in mind that not all package upgrades are security related.

mattydee 08-05-2009 04:02 PM
I'm not sure I understand you. When programmers fix security issues in a program, they update the version number.

GazL 08-05-2009 04:11 PM
As the others have said, usually the security updates are included in a new upstream minor release and the version number will be bumped by the upstream developers. In the less common situation of Pat having to patch something himself because upstream haven't done a fix, you'll see the build number at the end of the package (last number before the .tgz) go up by 1.

mRgOBLIN 08-05-2009 04:55 PM
In addition to what others have said...

Unless you are running slackware-current you will see that the security updates are in the patches/ directory.

for example the slackware-12.2 patches are here
ftp://ftp.funet.fi/pub/mirrors/ftp.s...-12.2/patches/
Read the PACKAGES.TXT there for the contents.

You could actually use
Code:
slackpkg update
slackpkg upgrade patches
to restrict it to security updates only if you really wanted to.
Please note: this does not apply to slackware-current.

joeBuffer 08-05-2009 05:08 PM
Thank you.
Code:
bash-3.1$ sudo slackpkg upgrade patches
Password:

Looking for patches in package list. Please wait... DONE

No packages match the pattern for upgrade. Try:

        /usr/sbin/slackpkg install|reinstall
:D

rworkman 08-05-2009 10:39 PM
Show the output of this command: grep -v ^# /etc/slackpkg/mirrors

joeBuffer 08-06-2009 12:42 AM
I'm using purdue.edu ...
Code:
#USA, 100Mbit
#ftp://ftp.ale.org/pub/mirrors/slackware/slackware-12.2/
#USA, 2xT3
ftp://ftp.cerias.purdue.edu/pub/os/slackware/slackware-12.2/
#USA, 100Mbit
#ftp://ftp.cs.stevens-tech.edu/pub/Linux/distributions/slackware/slackware-12.2/
Code:
bash-3.1$ grep -v ^# /etc/slackpkg/mirrors
ftp://ftp.cerias.purdue.edu/pub/os/slackware/slackware-12.2/
bash-3.1$

Ramurd 08-06-2009 04:07 AM
It could be, of course, that you're patched to the latest version numbers already... :-)

joeBuffer 08-06-2009 11:59 AM
Well, I was saying that I used slackpkg update and slackpkg upgrade-all already ... I just wasn't sure if that was giving me all the updates or security patches that I need.


All times are GMT -5. The time now is 02:13 AM.