I know keeping a FreeBSD server up to date is a very important. How can I apply binary system patches and updates to a new installation of FreeBSD 10 server?

You need to use the freebsd-update tool. It is used to fetch, install, and rollback binary updates to the FreeBSD base system.

Find out current FreeBSD release

Type the following command:
uname -mrs

OR

uname -a

Sample outputs:

FreeBSD netbook02 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan 16 22:34:59 UTC 2014     root@snap.freebsd.org:/usr/obj/usr/src/sys/GENERIC  amd64

FreeBSD install security updates and patch the server

Type the following command on a newly installed FreeBSD server:
# freebsd-update fetch install
Sample outputs:

freebsd-update fetch install
Looking up update.FreeBSD.org mirrors... 5 mirrors found.
Fetching metadata signature for 10.0-RELEASE from update4.freebsd.org... done.
Fetching metadata index... done.
Inspecting system... done.
Preparing to download files... done.

The following files will be updated as part of updating to 10.0-RELEASE-p5:
/bin/freebsd-version
/boot/kernel/ciss.ko
/boot/kernel/ciss.ko.symbols
/boot/kernel/kernel
/boot/kernel/kernel.symbols
/boot/kernel/nfsd.ko
/boot/kernel/nfsd.ko.symbols
/etc/defaults/rc.conf
/lib/libcrypto.so.7
/rescue/[
/rescue/atmconfig
/rescue/badsect
....
...
..
/usr/src/etc/defaults/rc.conf
/usr/src/sys/conf/newvers.sh
/usr/src/sys/dev/ciss/ciss.c
/usr/src/sys/fs/nfsserver/nfs_nfsdserv.c
/usr/src/sys/kern/kern_exec.c
/usr/src/sys/netinet/tcp_reass.c
/usr/src/sys/sys/proc.h
/usr/src/sys/vm/vm_map.c
/var/db/mergemaster.mtree
 Installing updates... done.

Reboot the FreeBSD server

Type the following command:
# reboot

Verify new system

Type the following command:
# uname -mrs
OR
# uname -a
Sample outputs:

See also

• FreeBSD apply security updates for installed ports/applications