Hi, Should we remove below entry from pkg-vulnerabilities? apache-[0-9]* null-dereference http://seclists.org/bugtraq/2015/Apr/90 Redhat rejected it as not a bug. https://bugzilla.redhat.com/show_bug.cgi?id=1212431 Best regards. -- Takahiro Kambe <taca%NetBSD.org@localhost>