[SOLVED] Slackware security & slackpkg ...

joeBuffer · 08-05-2009, 03:48 PM

I just recently posted that I was glad that, for the time being, I could use slackpkg for security updates using Slackware.
I read that people do this.
I looked on Slackware's site, the security advisories. I used

Code:

slackpkg update
slackpkg upgrade-all

I paid close attention. I did not see it update security, like what I've read you can do with it. All it did (that I could see, and I really did pay attention) is update to the newest packages. It was just updating the program versions. I didn't see any updates that weren't a different version than what I had, because it was just the version being updated, not security updates to the version I had. I also didn't see any downloads other than the version updates, that would be security updates for the new versions, either.

Chuck56 · 08-05-2009, 04:02 PM

I think you're confused or you've confused me. The security patches listed in the Security Advisories are normally included in the upgrade packages provided through slackpkg. Check the package versions listed in the changelog for the version your running. Keep in mind that not all package upgrades are security related.

mattydee · 08-05-2009, 04:02 PM

I'm not sure I understand you. When programmers fix security issues in a program, they update the version number.

GazL · 08-05-2009, 04:11 PM

As the others have said, usually the security updates are included in a new upstream minor release and the version number will be bumped by the upstream developers. In the less common situation of Pat having to patch something himself because upstream haven't done a fix, you'll see the build number at the end of the package (last number before the .tgz) go up by 1.

mRgOBLIN · 08-05-2009, 04:55 PM

In addition to what others have said...

Unless you are running slackware-current you will see that the security updates are in the patches/ directory.

for example the slackware-12.2 patches are here
ftp://ftp.funet.fi/pub/mirrors/ftp.s...-12.2/patches/
Read the PACKAGES.TXT there for the contents.

You could actually use

Code:

slackpkg update
slackpkg upgrade patches

to restrict it to security updates only if you really wanted to.
Please note: this does not apply to slackware-current.

joeBuffer · 08-05-2009, 05:08 PM

Thank you.

Code:

bash-3.1$ sudo slackpkg upgrade patches
Password:

Looking for patches in package list. Please wait... DONE

No packages match the pattern for upgrade. Try:

        /usr/sbin/slackpkg install|reinstall

rworkman · 08-05-2009, 10:39 PM

Show the output of this command: grep -v ^# /etc/slackpkg/mirrors

joeBuffer · 08-06-2009, 12:42 AM

I'm using purdue.edu ...

Code:

#USA, 100Mbit
#ftp://ftp.ale.org/pub/mirrors/slackware/slackware-12.2/
#USA, 2xT3
ftp://ftp.cerias.purdue.edu/pub/os/slackware/slackware-12.2/
#USA, 100Mbit
#ftp://ftp.cs.stevens-tech.edu/pub/Linux/distributions/slackware/slackware-12.2/

Code:

bash-3.1$ grep -v ^# /etc/slackpkg/mirrors
ftp://ftp.cerias.purdue.edu/pub/os/slackware/slackware-12.2/
bash-3.1$

Ramurd · 08-06-2009, 04:07 AM

It could be, of course, that you're patched to the latest version numbers already... :-)

joeBuffer · 08-06-2009, 11:59 AM

Well, I was saying that I used slackpkg update and slackpkg upgrade-all already ... I just wasn't sure if that was giving me all the updates or security patches that I need.