Updating, not upgrading

[David Given <dg@cowlark.com>]

I have been following the recent discussions on upgrading your system to
fix various security bugs --- you know what they are --- with much
interest.

I run OpenBSD 3.0 on my server, so I suspect it may be vulnerable. So I
need to fix it. *But* I don't want to upgrade to 3.1 or -current if I
can possibly help it; which means I need to update my /usr/ports and
/usr/src against the OPENBSD_3_0 branch and recompile, right?

My questions:

        * Is OPENBSD_3_0 still being kept up-to-date with respect to
          security fixes?
        * Assuming it is, is there a way of knowing which bits of
          /usr/src and /usr/ports I need to recompile and reinstall, so
          that I don't have to keep the .o files hanging around to make
          the Make dependencies work? I have limited disk space.
        * I'm sure there's a nifty way of automatically recompiling and
          updating all currently installed ports; but I can't find it.
          How do I do this?

I've read the upgrading mini-FAQ, but it seems to be mostly focused
around upgrading from one release to another, which I really don't want
to do --- are there any more suitable references?

--
+- David Given --McQ-+ "A character is considered to be a letter if and
|  dg@cowlark.com    | only if it is a letter or digit (§20.5.16) but is
not
| (dg@tao-group.com) | a digit (§20.5.14)." --- Sun Java language
+- www.cowlark.com --+ specification

[demime 0.98d removed an attachment of type application/pgp-signature which had a name of signature.asc]