Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Mar 2023 17:40:23 +0000
From:      bugzilla-noreply@freebsd.org
To:        pkg@FreeBSD.org
Subject:   maintainer-feedback requested: [Bug 270547] ports-mgmt/pkg: missing information about security vulnerabilities in system components
Message-ID:  <bug-270547-32340-64QS33otYU@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-270547-32340@https.bugs.freebsd.org/bugzilla/>
References:  <bug-270547-32340@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-pkg (Nobody)
<pkg@FreeBSD.org> for maintainer-feedback:
Bug 270547: ports-mgmt/pkg: missing information about security vulnerabilit=
ies
in system components
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D270547



--- Description ---
# pkg audit -F FreeBSD-kernel-13.1_6
Fetching vuln.xml.xz: 100%  996 KiB   1.0MB/s	 00:01
0 problem(s) in 0 installed package(s) found.

# pkg audit FreeBSD-13.1_6
0 problem(s) in 0 installed package(s) found.

There should be an information about CVE-2023-0286, CVE-2023-0215,
CVE-2022-4450 and CVE-2022-4304 at least.
Also periodic security (405.pkg-base-audit) reports are incomplete because =
of
the bug.

Reference:
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:03.openssl.asc



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-270547-32340-64QS33otYU>