>Number:         28332
>Category:       pkg
>Synopsis:       pkgsrc ignores audit-packages.conf when checking vulnerabilities
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Nov 16 19:00:00 +0000 2004
>Originator:     syn@sceen.net
>Release:        NetBSD 1.6.2_STABLE
>Organization:
Richard Braun
>Environment:
System: NetBSD leia 1.6.2_STABLE NetBSD 1.6.2_STABLE (LEIA) #0: Sun Oct 24 16:57:07 CEST 2004 syn@leia:/usr/src/sys/arch/i386/compile/LEIA i386
Architecture: i386
Machine: i386
>Description:
When building a third party package with pkgsrc, vulnerabilities of the
package built are checked. But that check ignores the content of the
file /usr/pkg/etc/audit-packages.conf. If the vulnerability file is located
in a non-default path, the check isn't performed.

>How-To-Repeat:
>Fix: