[Bug 262966] ports-mgmt/pkg: pkg can't recover from a corrupt vulnerability database.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262966

            Bug ID: 262966
           Summary: ports-mgmt/pkg: pkg can't recover from a corrupt
                    vulnerability database.
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: pkg@FreeBSD.org
          Reporter: peterj@FreeBSD.org
          Assignee: pkg@FreeBSD.org
             Flags: maintainer-feedback?(pkg@FreeBSD.org)

The lastest 410.pkg-audit run on one of my systems failed and reported:
Checking for packages with security vulnerabilities:
pkg: archive_read_data_into_fd((null)) failed: Lzma library error: Corrupted
input data
pkg: Invalid end of XML
pkg: cannot process vulnxml

Looking at /var/db/pkg/vuln.xml, it is obviously truncated but when I manually
run:
$ sudo pkg audit -F
it just reports that the database is up to date.  Instead, I need to manually
remove the corrupt vuln.xml and then run "pkg audit -F".  I would expect either
an option to force a fetch or for "pkg audit" to verify the integrity of the
existing database and re-fetch the database if it's corrupt.

-- 
You are receiving this mail because:
You are the assignee for the bug.