From owner-freebsd-ports@freebsd.org  Wed Sep  2 18:30:37 2015
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 21A1E9C861E
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Wed,  2 Sep 2015 18:30:37 +0000 (UTC)
 (envelope-from robbelics@gmail.com)
Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com
 [IPv6:2607:f8b0:4003:c06::22c])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id ED18DFC0
 for <freebsd-ports@freebsd.org>; Wed,  2 Sep 2015 18:30:36 +0000 (UTC)
 (envelope-from robbelics@gmail.com)
Received: by oiww128 with SMTP id w128so11150097oiw.2
 for <freebsd-ports@freebsd.org>; Wed, 02 Sep 2015 11:30:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :cc:content-type;
 bh=ZW2CsfYVXO4HoFT+5k/YbKc+E2BjqOy9/Ae9Po2nvUc=;
 b=E5wRQ/LsBu5X4gu2CeaZK1Ih2ILeCQbBL7bM24TxJP2Y6eNFkeDa3xwA/xXiOQriHn
 0Co548JztKVVw1TbtBwtADoo2Gvrj4g5Elw4AFLoh5f3wDCmrn2uuqhm2a8aAPfziyw2
 UZF6npTdEwjPjCDYfhmicZHEuXho6Zvy8sp3ADqQpV5IPjl+yh7O+Onu/Cc+XRVdDs7W
 7lxTVP+coEw0Oyz2NxJa+k+f3Smm9W7aRUtsC2KUcY4Mtjh6zqR+PpdN1DeIhRt0iXrN
 ULK8SavUeTuKwwlc8rKF1dtU+7txBr4TXkK8dRh2//BUE81Qxk5qhK5PIORqFng7r9M1
 O+hA==
MIME-Version: 1.0
X-Received: by 10.202.107.212 with SMTP id g203mr13814379oic.36.1441218636195; 
 Wed, 02 Sep 2015 11:30:36 -0700 (PDT)
Received: by 10.202.172.206 with HTTP; Wed, 2 Sep 2015 11:30:36 -0700 (PDT)
In-Reply-To: <CA+7WWScn2F6+kG3YctMQ6c_QiF8grh8rfQBMYQ6fGc4WdwxiWA@mail.gmail.com>
References: <CAPu-kW_jsUvfAW-_FzK-sr_e-PF0n0=3Z++u8vcWUjhp4jm_Ew@mail.gmail.com>
 <CA+7WWScn2F6+kG3YctMQ6c_QiF8grh8rfQBMYQ6fGc4WdwxiWA@mail.gmail.com>
Date: Wed, 2 Sep 2015 13:30:36 -0500
Message-ID: <CAPu-kW-SK6Pv9BM8R-pxJZnwMbqbiQmLDZYh2RY0xd6zZXXFvQ@mail.gmail.com>
Subject: Re: lang/go security problem on one but not the other
From: Rob Belics <robbelics@gmail.com>
To: Kimmo Paasiala <kpaasial@gmail.com>
Cc: FreeBSD Ports ML <freebsd-ports@freebsd.org>
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.20
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Sep 2015 18:30:37 -0000

On Wed, Sep 2, 2015 at 1:12 PM, Kimmo Paasiala <kpaasial@gmail.com> wrote:

> On Wed, Sep 2, 2015 at 8:13 PM, Rob Belics <robbelics@gmail.com> wrote:
> > I found an updated vuln.xml in /usr/ports/security/vuxml/ dated today. I
> > will copy that over to /var/db/pkg/ but still question why that file was
> > not updated.
> >
>
> It's not updated by portsnap(8) but pkg-updating(8). Portmaster won't
> update it either. There's a periodic(8) job that should update it
> daily at /usr/local/etc/periodic/security/410.pkg-audit, controlled by
> daily_status_security_pkgaudit_enable periodic.conf(5) setting that
> defaults to YES.
>
> -Kimmo
>

Neither periodic.conf have anything in them but the one system I'm having
trouble with was upgraded from FreeBSD 9.3, perhaps around the date
vuln.xml now shows.