maintainer-feedback requested: [Bug 270547] ports-mgmt/pkg: missing information about security vulnerabilities in system components

In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 270547] ports-mgmt/pkg: missing information about security vulnerabilities in system components"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 30 Mar 2023 17:40:23 UTC

Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-pkg (Nobody)
<pkg@FreeBSD.org> for maintainer-feedback:
Bug 270547: ports-mgmt/pkg: missing information about security vulnerabilities
in system components
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270547



--- Description ---
# pkg audit -F FreeBSD-kernel-13.1_6
Fetching vuln.xml.xz: 100%  996 KiB   1.0MB/s	 00:01
0 problem(s) in 0 installed package(s) found.

# pkg audit FreeBSD-13.1_6
0 problem(s) in 0 installed package(s) found.

There should be an information about CVE-2023-0286, CVE-2023-0215,
CVE-2022-4450 and CVE-2022-4304 at least.
Also periodic security (405.pkg-base-audit) reports are incomplete because of
the bug.

Reference:
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:03.openssl.asc