How to update applications and system files?

[ernbsd]

Good morning!

How to update applications and system files to fix file vulnerabilities with past versions?

The system GhostBSD 11.1 BETA1 for 64 bits, this built on binary packages and tarball packages among other packages of other formats such as zip, because the system is not built by ports? The ports folder contains nothing, such as updating applications or files? The vulnerabilities in the system cannot be corrected.

[ASX]

Good morning!

How to update applications and system files to fix file vulnerabilities with past versions?

The system GhostBSD 11.1 BETA1 for 64 bits, this built on binary packages and tarball packages among other packages of other formats such as zip, because the system is not built by ports? The ports folder contains nothing, such as updating applications or files? The vulnerabilities in the system cannot be corrected.

More than a good morning sound much like trolling. I would suggest you to use a more approriate tone, and to inform yourself before asserting the lot of nonsense you wrote above. You clearly have no idea what you are talking about.

Have a nice day.

[ernbsd]

More than a good morning sound much like trolling. I would suggest you to use a more approriate tone, and to inform yourself before asserting the lot of nonsense you wrote above. You clearly have no idea what you are talking about.

Have a nice day.

What one has to read, just to greet and open a topic sound much like trolling? I just exposed what was seen in the newly installed system, nothing more, any solution?

[kraileth]

Good morning!

How to update applications and system files to fix file vulnerabilities with past versions?

The system GhostBSD 11.1 BETA1 for 64 bits, this built on binary packages and tarball packages among other packages of other formats such as zip, because the system is not built by ports? The ports folder contains nothing, such as updating applications or files? The vulnerabilities in the system cannot be corrected.

Took me a while to understand what you could possible mean but here's my take on answering:

I guess that you took a look at the contents of a GhostBSD ISO, namely the "dist" folder. No, usr.uzip is not a Zip file, even though it's also compressed using zlib. Basically it's a compressed disk image. If you're really interested in more details: man 4 geom_uzip.

If you really wonder how the ISOs are updated: They aren't. They are built for each new release and stay how they are afterwards. Should you need a live CD with current software, go and roll a new ISO yourself. It's all open source and you're free to use it as you see fit.

In case you mean updating a freshly installed system (which is a good idea):

Packages: man 8 pkg
Base system: man 8 freebsd-update
Or if you want a tool to do both and in a GUI environment: That's what we have the update-station.

[ASX]

Took me a while to understand what you could possible mean but here's my take on answering:

You can have a better idea by reading this: viewtopic.php?f=58&t=753&p=5099#p5097

[kraileth]

Took me a while to understand what you could possible mean but here's my take on answering:

You can have a better idea by reading this: viewtopic.php?f=58&t=753&p=5099#p5097

Yeah, maybe I'm wasting my time answering this. However there are potentially a lot more readers on the forums and it doesn't really hurt. Before I even consider becoming part of any community I usually watch the tone there first. From my experience it makes a difference if participants manage to stay polite even in pretty dubious cases and that's what I'm trying to do.

[rmsickler]

Sudo pkg update && sudo pkg upgrade

[ericbsd]

Sudo pkg update && sudo pkg upgrade

Actually, Update Station is recommended.

This bellow is the worst way to recommend to update.

Code: Select all

sudo pkg update && sudo pkg upgrade

Update Station is looking for kernel upgrade with sudo pkg update -f. If sudo pkg update -f complain about kernel mismatch Update Station do a forced upgrade. sudo pkg upgrade -f reinstall all the packages from the last build with the right kernel version.

Failing to do it like that will end up on a system with many problems, and the system will most likely not boot to GUI.

[cid]

My GhostBSD version is 20.12.25 and I can't update latest packages (according FreeBSD repository).
Is GhostBSD repository is up to date ?
Update Station tells me I'm up to date.

Code: Select all

root@ghost /h/cid# pkg update && pkg upgrade
Updating GhostBSD repository catalogue...
GhostBSD repository is up to date.
All repositories are up to date.
Updating GhostBSD repository catalogue...
GhostBSD repository is up to date.
All repositories are up to date.
Checking for upgrades (0 candidates): 100%
Processing candidates (0 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.

But...

Code: Select all

root@ghost /h/cid# pkg audit -F
Fetching vuln.xml.bz2: 100%  906 KiB 927.9kB/s    00:01    
chromium-87.0.4280.141 is vulnerable:
  www/chromium -- multiple vulnerabilities
  CVE: CVE-2021-21147
  CVE: CVE-2021-21146
  CVE: CVE-2021-21145
  CVE: CVE-2021-21144
  CVE: CVE-2021-21143
  CVE: CVE-2021-21142
  WWW: https://vuxml.FreeBSD.org/freebsd/479fdfda-6659-11eb-83e2-e09467587c17.html

  chromium -- multiple vulnerabilities
  CVE: CVE-2021-21141
  CVE: CVE-2021-21140
  CVE: CVE-2021-21139
  CVE: CVE-2021-21138
  CVE: CVE-2021-21137
  CVE: CVE-2021-21136
  CVE: CVE-2021-21135
  CVE: CVE-2021-21134
  CVE: CVE-2021-21133
  CVE: CVE-2021-21132
  CVE: CVE-2021-21131
  CVE: CVE-2021-21130
  CVE: CVE-2021-21129
  CVE: CVE-2021-21128
  CVE: CVE-2021-21127
  CVE: CVE-2021-21126
  CVE: CVE-2021-21125
  CVE: CVE-2021-21124
  CVE: CVE-2021-21123
  CVE: CVE-2021-21122
  CVE: CVE-2021-21121
  CVE: CVE-2021-21120
  CVE: CVE-2021-21119
  CVE: CVE-2021-21118
  CVE: CVE-2021-21117
  CVE: CVE-2020-16044
  WWW: https://vuxml.FreeBSD.org/freebsd/4ed0e43c-5cef-11eb-bafd-3065ec8fd3ec.html

sudo-1.9.5p1 is vulnerable:
  sudo -- Multiple vulnerabilities
  CVE: CVE-2021-3156
  WWW: https://vuxml.FreeBSD.org/freebsd/f3cf4b33-6013-11eb-9a0e-206a8a720317.html

3 problem(s) in 2 installed package(s) found.

[cid]

Today, Update Station works. Thanks