[Bug 256236] ports-mgmt/pkg: audit command didn't work properly with port epoch

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 29 May 2021 08:00:53 +0000
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256236

            Bug ID: 256236
           Summary: ports-mgmt/pkg: audit command didn't work properly
                    with port epoch
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: security
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: pkg_at_FreeBSD.org
          Reporter: kirill_at_varnakov.com
             Flags: maintainer-feedback?(pkg_at_FreeBSD.org)
          Assignee: pkg_at_FreeBSD.org

Hi.

We skip some important information about security vulnerabilities if port epoch
> 1.

For example:

server1# pkg audit nginx-1.20.0_2,1
nginx-1.20.0_2,1 is vulnerable:
........


Works well. But if we change the epoch to 2:


server1# pkg audit nginx-1.20.0_2,2
0 problem(s) in 0 installed package(s) found.


The nginx port is currently at epoch 2.

-- 
You are receiving this mail because:
You are the assignee for the bug.
Received on Sat May 29 2021 - 08:00:53 UTC

Original text of this message