Date: Tue, 19 Oct 2004 09:59:52 -0500 From: "Jacques A. Vidrine" <nectar@FreeBSD.org> To: Dan Langille <dan@langille.org> Cc: freebsd-vuxml@freebsd.org Subject: Re: can portaudit report a fixed date/version? Message-ID: <20041019145952.GA22119@madman.celabo.org> In-Reply-To: <20041017201037.V55729@xeon.unixathome.org> References: <20041017201037.V55729@xeon.unixathome.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Oct 17, 2004 at 08:13:02PM -0400, Dan Langille wrote: > Hi folks: > > I have portaudit installed. Each morning I get notified if there are any > vulnerabilities that I should know about. That's good. > > I think portaudit should also tell me if it knows there is a fix available > in the tree. That would immediately tell me that I can cvsup and get the > problem fixed. > > Comments? The VuXML format contains only which packages are affected, and not an direct indicator whether or not a fix has been applied. This is by design. Including that information would be redundant. From VuXML, you know what package versions are affected. From the Ports Collection, you know what package versions are available. A tool such as portaudit could compute whether a fix is available or not for you. It might be a nice feature. Cheers, -- Jacques A Vidrine / NTT/Verio nectar@celabo.org / jvidrine@verio.net / nectar@FreeBSD.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041019145952.GA22119>