> At the moment I am on 5.6-release > > But you want to track -stable OS and packages. There is a -stable ports branch. I don't know what the criteria is for what is checked in there, but there are certainly updates related to security issues at least. Probably depends a lot on the port maintainer.
I throw this out to see what I get for a response because I just went trough this yesterday. I wanted to track -stable ports and had started with -release and binary packages as well. I decided to change to compiling ports instead of using MTier binaries. Pulled the stable ports branch from CVS and used /usr/ports/infrastructure/bin/out-of-date to get the list of packages that were out of date or had dependencies out of date. Then, of course, built and reinstalled what was needed. Tim.