maintainer-feedback requested: [Bug 262966] ports-mgmt/pkg: pkg can't recover from a corrupt vulnerability database.

Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-pkg (Nobody)
<pkg@FreeBSD.org> for maintainer-feedback:
Bug 262966: ports-mgmt/pkg: pkg can't recover from a corrupt vulnerability
database.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262966



--- Description ---
The lastest 410.pkg-audit run on one of my systems failed and reported:
Checking for packages with security vulnerabilities:
pkg: archive_read_data_into_fd((null)) failed: Lzma library error: Corrupted
input data
pkg: Invalid end of XML
pkg: cannot process vulnxml

Looking at /var/db/pkg/vuln.xml, it is obviously truncated but when I manually
run:
$ sudo pkg audit -F
it just reports that the database is up to date.  Instead, I need to manually
remove the corrupt vuln.xml and then run "pkg audit -F".  I would expect either
an option to force a fetch or for "pkg audit" to verify the integrity of the
existing database and re-fetch the database if it's corrupt.