Re: Security project meeting summary

Robert Buchholz <[email protected]> Tue, 29 Jul 2008 04:13:38 +0200

Newsgroups	gmane.linux.gentoo.security
Message-ID	<[email protected]>

On Tuesday 29 July 2008, Bill wrote:
> > Currently (to the best of my understanding) there is no easy way
> > (e.g.: an /emerge/ option) to identify and update only the packages
> > that have security fixes.
>
>  This doesn't work anymore?
>
>    1. emerge --sync (emerge-webrsync)
>    2. glsa-check -p affected
>    3. glsa-check -f affected
>    4. env-update
>    5. revdep-rebuild

GLSA support has also been integrated into Portage 2.2, so you can do 
something along the lines of
   # emerge --update @security


Robert

signature.asc (application/pgp-signature, 835 B)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
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=dej7
-----END PGP SIGNATURE-----