Im a newbie in openbsd, so i started reading the documentation in openbsd.org, and i want some confirmation or correction on my understanding after reading the ports section of the FAQ.
-I've installed -release from http with the "cd61.iso" so i have -release installed. -After that i run "syspatch", so i have -stable installed (-release with latest patches applied) -Then, i added some ports with "pkg_add <package>", so those packages may be outdated in the sense of latest security packages, because -stable don't get binary security updates, and issuing "pkg_add <package>" installed the -stable package instead of the -current (latest) version. -So i proceeded to get the CVS tree of ports as stated in the FAQ, and if i build the same ports with "make install" then i will get the latest security patches applied to my ports. This got me thinking, that then, it's better to install the ports packages directly from compiling from CVS after a fresh -release and then -stable installation. -From this point, (-stable base system and -stable ports from CVS), to update everything with the latest security patches i need to "syspatch" to get the latest patches applied automatically to base system, and cvs update in the ports directory to get the latest patches for installed ports and then "make install" to every package that has been updated with security patches. Because "pkg_add -Uuv" is only for updating -current ports, and will do nothing in a system with -stable ports (because, as stated before, -stable didn't get binary ports updates, only the patches in the CVS tree). Hope to read your corrections in my understanding of the system! Thanks!