fail to fetch vulnxml file each night, as seen in daily security, run output.

[William A. Mahaffey III]

On 09/02/15 09:36, Ernie Luzar wrote:
> William A. Mahaffey III wrote:
>> On 09/02/15 09:05, Ernie Luzar wrote:
>>> Hello list;
>>>
>>> I get the following message in the daily security run output on both 
>>> my 10.1 and 10.2 systems. Both which were installed from scratch 
>>> using a cdisc1.iso file.
>>>
>>> Checking for packages with security vulnerabilities:
>>> pkg: http://vuxml.freebsd.org/freebsd/vuln.xml.bz2: No route to host
>>> pkg: cannot fetch vulnxml file
>>>
>>> -- End of security output --
>>>
>>>
>>> Is this normal by design?
>>
>>
>> 'No route to host' means networking issue. I get the same thing 
>> whenever I disconnect my Cable modem overnight, which I often do. 
>> Make sure your networking is working AOK overnight when that fetch is 
>> attempted.
>>
>>
> My network is on 7/24 so that is not the problem.
> When I launch http://vuxml.freebsd.org/freebsd/vuln.xml.bz2 in my 
> browser I get a 404.
> This means the vuln.xml.bz2  is not present.


Agreed. Misconfigured repo or repo down for some reason ? If so, not a 
design or software flaw BTW, but a (presumably temporary) infrastructure 
issue. If a bad file-name in a config file, bug, file it :-), although 
it is a bit hard to believe that would have survived 2 software version 
revisions.


-- 

	William A. Mahaffey III

  ----------------------------------------------------------------------

	"The M1 Garand is without doubt the finest implement of war
	 ever devised by man."
                            -- Gen. George S. Patton Jr.