>Number:         27016
>Category:       pkg
>Synopsis:       audit-packages ignores gtk2+ vulnerabilities
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Wed Sep 22 05:17:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Christian Biere
>Release:        NetBSD 2.0G
>Organization:
>Environment:
System: NetBSD cyclonus 2.0G NetBSD 2.0G (STARSCREAM) #0: Tue Jul 20 02:41:48 CEST 2004 bin@cyclonus:/usr/obj/sys/arch/i386/compile/STARSCREAM i386
Architecture: i386
Machine: i386
>Description:
Apparently, the package gtk2+ was renamed to gtk2 or the list is just wrong.
The list of vulnerabilities regarding GTK+ 2.x lists gtk2 but not gtk2+, so
that the installation of the package x11/gtk2 is ignored.

>How-To-Repeat:

 $ /usr/pkg/sbin/audit-packages

>Fix:
Add all vulnerabilities concerning gtk2 also for gtk2+.
>Release-Note:
>Audit-Trail:
>Unformatted: