Much of the time, we would recompile from ports or use pkg to upgrade programs. We use freebsd-update to keep the system patched. What about major and minor version changes for programs like ssh (OpenSSH) which are central to the performance of FreeBSD? How are those updated? When we select a version of FreeBSD to run, are we basically stuck with some programs until we upgrade to a later version? If so, which kinds of programs might be in that situation?