[Bug 256236] ports-mgmt/pkg: audit command didn't work properly with port epoch

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256236

            Bug ID: 256236
           Summary: ports-mgmt/pkg: audit command didn't work properly
                    with port epoch
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: security
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: pkg@FreeBSD.org
          Reporter: kirill@varnakov.com
             Flags: maintainer-feedback?(pkg@FreeBSD.org)
          Assignee: pkg@FreeBSD.org

Hi.

We skip some important information about security vulnerabilities if port epoch
> 1.

For example:

server1# pkg audit nginx-1.20.0_2,1
nginx-1.20.0_2,1 is vulnerable:
........


Works well. But if we change the epoch to 2:


server1# pkg audit nginx-1.20.0_2,2
0 problem(s) in 0 installed package(s) found.


The nginx port is currently at epoch 2.

-- 
You are receiving this mail because:
You are the assignee for the bug.