Date: Sat, 29 May 2021 08:00:53 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 256236] ports-mgmt/pkg: audit command didn't work properly with port epoch Message-ID: <bug-256236-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D256236 Bug ID: 256236 Summary: ports-mgmt/pkg: audit command didn't work properly with port epoch Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Keywords: security Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: pkg@FreeBSD.org Reporter: kirill@varnakov.com Flags: maintainer-feedback?(pkg@FreeBSD.org) Assignee: pkg@FreeBSD.org Hi. We skip some important information about security vulnerabilities if port e= poch > 1. For example: server1# pkg audit nginx-1.20.0_2,1 nginx-1.20.0_2,1 is vulnerable: ........ Works well. But if we change the epoch to 2: server1# pkg audit nginx-1.20.0_2,2 0 problem(s) in 0 installed package(s) found. The nginx port is currently at epoch 2. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-256236-7788>