https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270744
Philip Paeps <phi...@freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|Open |In Progress
--- Comment #4 from Philip Paeps <phi...@freebsd.org> ---
Listing the flavours that currently exist leaves open the possibility that
someone installs a vulnerable package for a future flavour of Python -- one
that does not yet exist at the time the vulnerability is recorded.
The long-term solution would be for "pkg audit" to become aware of flavours.
For now, I think your proposed patch is good enough.
--
You are receiving this mail because:
You are on the CC list for the bug.
