pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

pkg/28332: pkgsrc ignores audit-packages.conf when checking vulnerabilities



>Number:         28332
>Category:       pkg
>Synopsis:       pkgsrc ignores audit-packages.conf when checking 
>vulnerabilities
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Nov 16 19:00:00 +0000 2004
>Originator:     syn%sceen.net@localhost
>Release:        NetBSD 1.6.2_STABLE
>Organization:
Richard Braun
>Environment:
System: NetBSD leia 1.6.2_STABLE NetBSD 1.6.2_STABLE (LEIA) #0: Sun Oct 24 
16:57:07 CEST 2004 syn@leia:/usr/src/sys/arch/i386/compile/LEIA i386
Architecture: i386
Machine: i386
>Description:
When building a third party package with pkgsrc, vulnerabilities of the
package built are checked. But that check ignores the content of the
file /usr/pkg/etc/audit-packages.conf. If the vulnerability file is located
in a non-default path, the check isn't performed.

>How-To-Repeat:
>Fix:




Home | Main Index | Thread Index | Old Index