[Bug 212306] ports-mgmt/pkg patch to add ability to run pkg audit on base from periodic

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212306

--- Comment #5 from Miroslav Lachman <000.fbsd at quip.cz> ---
(In reply to Dan Langille from comment #4)
There is a difference between 410.pkg-audit and 405.pkg-base-audit. The later
checks vulnerabilities in base not in packages from ports tree. Your command
output shows vulnerabilities in packages, namely curl.
405.pkg-base-audit will report vulnerability in kernel or FreeBSD userland and
this is still missing from pkg itself. 405.pkg-base-audit is separate port.

-- 
You are receiving this mail because:
You are the assignee for the bug.