Security updates from FreeBSD or only from FreeNAS?

[futurity]

Hi,

I was wondering if a FreeNAS server gets its OS security updates directly from FreeBSD as soon as FreeBSD release them, or if updates are only available from FreeNAS?

The reason I ask is that I'm considering recommending FreeNAS as a custom NAS solution at work, but work require timely installation of security patches as soon as vulnerabilities are identified.

I'm struggling to find a FreeNAS change log, so that i can see how often security patches are made available. I'd be grateful if someone could send me a link to the webpage?

Kind regards,

Neil

 

[amiskell]

Hi,

I was wondering if a FreeNAS server gets its OS security updates directly from FreeBSD as soon as FreeBSD release them, or if updates are only available from FreeNAS?

The reason I ask is that I'm considering recommending FreeNAS as a custom NAS solution at work, but work require timely installation of security patches as soon as vulnerabilities are identified.

I'm struggling to find a FreeNAS change log, so that i can see how often security patches are made available. I'd be grateful if someone could send me a link to the webpage?

Kind regards,

Neil

You might want to reach out to iXSystems directly. If you are intending to use this in an environment with stringent security and compliancy controls, you'd probably be better of using TrueNAS which is the commercial variant of FreeNAS.

 

[Ericloewe]

FreeNAS is updated as a single entity, there aren't security patches from FreeBSD available to be applied to a FreeNAS installation.

Major security fixes are released very close to the FreeBSD release, generally within a day or two.

That said, FreeNAS is not a hardened internet-facing system, so the expected threat surface is meant to be smaller.