On Wed, 25 Jan 2006, Steven M. Bellovin wrote:

> >Is this what you mean?
> >
> > pkg_info -Q PKGPATH -a | while read p ; do cd $p && bmake show-var \
> >   VARNAME=PKGNAME ; cd ${OLDPWD} ; done
> 
> No -- that works on what I have on my system.  I want something that's 
> run on a NetBSD server, doing that for all possible packages.  That 
> way, I can pull down one file and see if I should upgrade any of my 
> insecure packages.  I'm trying to avoid everyone wanting to do
> 'cvs update' every day via cron.

Is this because the pkg-vulnerabilities (audit-packages) might list 
packages that do not really have updates yet?

Or you are interested in knowing about any updates, and not just security 
updates. And it could also be used simply to show what is now available.

Hosting that list on some official server seems fine. I don't know if 
NetBSD web or ftp server has up-to-date pkgsrc to build the list from 
daily. But if so, that would be easy to do.

I wonder if parsing doc/CHANGES could be used too.

 Jeremy C. Reed

 	  	 	 BSD News, BSD tutorials, BSD links
	  	 	 http://www.bsdnewsletter.com/