How to learn about new patches on a timely basis

DominikHoffmann

Where can I sign up for notifications about the availability new patches?

stephenw10

The patches package is updated to add new recommended patches so including the packages widget in the dashboard would show you when that happens.

DominikHoffmann

@stephenw10: is there a way to get emailed, when there are updates to the patches?

stephenw10

Not for updates to patches like that. Not officially at least.

There is a user script to send notifications from the firewall when pkg updates are available.
https://forum.netgate.com/topic/137707/auto-update-check-checks-for-updates-to-base-system-packages-and-sends-email-alerts

I haven't tested it in a while though. I'm not sure it's been updated for the new branch system.

DominikHoffmann

@stephenw10: I use that script (authored by @luckman212), but at least the version I have does not check for new patches. Checking, whether that version is still the latest.

Gertjan

@DominikHoffmann

As said in the other thread, I'm using that script.

It told me - I received a mail - one or two days ago that this package :

had an upgrade.

This was the mail :

Notifications in this message: 1
================================

07:01:11 The following updates are available and can be installed using System > Package Manager:

System_Patches: 2.2.11_13 ==> 2.2.11_14

Some packages are part of the base system and will not show up in Package Manager. If any such updates are listed below, run `pkg upgrade` from the shell to install them:

pfSense-pkg-System_Patches: 2.2.11_13 -> 2.2.11_14 [pfSense]

It can't get any better then that ^^

Even FreeBSD packages, like 'curl' or unbound' or 'pkg' itself, if they have an update ready, will be shown. To upgrade these, the command line (SSH, console) is needed, though.

JonathanLee

Someone should make a feature request for email for patch updates, I have my system already setup to email me on reboots and errors. And now updates thanks

stephenw10

The patches package does not itself pull in a patch list. When new recommended patches are added a new package version is built. So checking for a package update is sufficient.

JonathanLee

@stephenw10 whenever there is new patches in the pfSense-pkg-System-Patches a new version of the package is built. wouldn't that reflect some kind of update is needed right?

Updated: you just said that haha :)