Re: NEW: pkg_check

2005-11-03 Thread Uwe Dippel
On Thu, 03 Nov 2005 08:09:22 +0100, Antoine Jacoutot wrote: > Quick guess because you need a ports tree. Of course, there was something I overlooked ! On the other hand, cvs remains the 'master', and instead of manually updating a reference site, would it not be better and simpler to refer t

Re: NEW: pkg_check

2005-11-03 Thread Antoine Jacoutot
[EMAIL PROTECTED] wrote: This not handled by pkg_check. I guess the package management system can't figure out that mc-4.6.1p0 is greater than mc-4.6.1pre1p0. The RFC Marc Espie just posted tackles this problem. Well, it defeats the purpose of pkg_check then... Anyway, I hope a better versionin

Re: NEW: pkg_check

2005-11-03 Thread hanz
> Hans van Leeuwen wrote: >> After reading packages-specs(7) I managed to fix the problem. >> Could you please test this new version? > > It still works fine for me under macppc. > > _But_ I do have a question though. > pkg_check reports that the following installed packages is affected by a > vuln

Re: NEW: pkg_check

2005-11-02 Thread Antoine Jacoutot
Uwe Dippel wrote: This may be a dumb one, but I am curious: Why not check against the package names as they come from cvs ? Quick guess because you need a ports tree.

Re: NEW: pkg_check

2005-11-02 Thread Uwe Dippel
On Wed, 02 Nov 2005 17:54:03 +0100, Hans van Leeuwen wrote: > "pkg_check is build on top of OpenBSD's ports-system. It checks a given > list of packages for vulnerablities against the VuXML database. If no > package is given all installed packages will be checked." This may be a dumb one, but I

Re: NEW: pkg_check

2005-11-02 Thread Antoine Jacoutot
Hans van Leeuwen wrote: After reading packages-specs(7) I managed to fix the problem. Could you please test this new version? It still works fine for me under macppc. _But_ I do have a question though. pkg_check reports that the following installed packages is affected by a vulnerability: mc

Re: NEW: pkg_check

2005-11-02 Thread Andy Wingate
In message <[EMAIL PROTECTED]> Hans van Leeuwen <[EMAIL PROTECTED]> wrote: > Hans van Leeuwen wrote: > > > > On Wed, Nov 02, 2005 at 05:54:03PM +0100, Hans van Leeuwen > > > wrote: > > > > > > > > > > "pkg_check is build on top of OpenBSD's ports-system. It > > > > checks a given list

Re: NEW: pkg_check

2005-11-02 Thread steven mestdagh
> >>How do you decide whether a program is affected? I'm getting the result > >>below, which does not look correct, i.e. I assume 3.1.0 is not affected. > >>How up-to-date is the database you use? > >> > >But you are right, p5-Mail-SpamAssassin-3.1.0 should not show up. I > >will look into it late

Re: NEW: pkg_check

2005-11-02 Thread Hans van Leeuwen
Hans van Leeuwen wrote: steven mestdagh wrote: On Wed, Nov 02, 2005 at 05:54:03PM +0100, Hans van Leeuwen wrote: "pkg_check is build on top of OpenBSD's ports-system. It checks a given list of packages for vulnerablities against the VuXML database. If no package is given all installed pac

Re: NEW: pkg_check

2005-11-02 Thread Nikolay Sturm
* Antoine Jacoutot [2005-11-02]: > Just one question though, who takes care of the VuXML database for > OpenBSD ? I mean, can one trust it or is it totally unofficial ? It is totally unofficial for now, this might change in the future, or not. Robert ist maintaining it and I am committing stuff f

Re: NEW: pkg_check

2005-11-02 Thread Hans van Leeuwen
steven mestdagh wrote: On Wed, Nov 02, 2005 at 05:54:03PM +0100, Hans van Leeuwen wrote: "pkg_check is build on top of OpenBSD's ports-system. It checks a given list of packages for vulnerablities against the VuXML database. If no package is given all installed packages will be checked."

Re: NEW: pkg_check

2005-11-02 Thread Robert Nagy
sturm@ and me. On (02/11/05 18:12), Antoine Jacoutot wrote: > > Just one question though, who takes care of the VuXML database for > OpenBSD ? I mean, can one trust it or is it totally unofficial ? > > Antoine

Re: NEW: pkg_check

2005-11-02 Thread steven mestdagh
On Wed, Nov 02, 2005 at 05:54:03PM +0100, Hans van Leeuwen wrote: > > "pkg_check is build on top of OpenBSD's ports-system. It checks a given > list of packages for vulnerablities against the VuXML database. If no > package is given all installed packages will be checked." > > Please test the p

Re: NEW: pkg_check

2005-11-02 Thread dorqus
Hans van Leeuwen wrote... > "pkg_check is build on top of OpenBSD's ports-system. It checks a given > list of packages for vulnerablities against the VuXML database. If no > package is given all installed packages will be checked." > > Please test the port and the program. Seems to work OK, rep

Re: NEW: pkg_check

2005-11-02 Thread Antoine Jacoutot
Hans van Leeuwen wrote: "pkg_check is build on top of OpenBSD's ports-system. It checks a given list of packages for vulnerablities against the VuXML database. If no package is given all installed packages will be checked." Please test the port and the program. First, let me tell you that