Re: net/synapse package vulnerable, 14 updates behind?

On Wed, Aug 30, 2023 at 10:22 AM Morgan Aldridge <morgant@makkintosshu.com>
wrote:

> On Wed, Aug 30, 2023 at 04:33 Stuart Henderson <stu@spacehopper.org>
> wrote:
>
>> On 2023/08/30 07:39, Oikei wrote:
>> > Hello, I'm new to OpenBSD so im unsure if im doing something wrong or
>> if im even posting to the right mailing list
>> > It has come to my attention that the net/synapse package is 14 updates
>> behind and is vulnerable. I checked openbsd.app and the net/synapse
>> package really is 14 updates behind, with it being on 1.76 while the latest
>> is 1.90.
>> > Checking the source on github:
>> https://github.com/openbsd/ports/tree/master/net/synapse
>> > it was updated last month and is on 1.89.
>
>
> On openbsd.app, you'd need to toggle on the "Search -current" setting to
> see the newest packages. See <
> https://www.openbsd.org/faq/faq5.html#Flavors> for the differences
> between -release, -stable, and -current (helpful context for Stuart's
> detailed explanation and advice below.)
>
> On a related note, if you are using pkg_info(1) on -release or -stable,
> you'll want to use `pkg_info -aq` instead of just `pkg_info -q` to search
> packages to ensure that -stable versions are included.
>

Correction: `pkg_info -aQ` instead of just `pkg_info -Q`. My apologies for
the typo!

Morgan