> Simplify quoting syntax in the awk command, so that gawk-3.1.3 (as found in
> NetBSD-current) doesn't have a problem with a malformed escape sequence.

Why awk is neccesary?  I guess just using shell constructs like below
is enough.

enami.

while read pat type url
do
	case $pat in
	\#*|'') continue;;
	esac

	if /usr/sbin/pkg_info -qe $pat; then
		echo Package `/usr/sbin/pkg_info -e $pat` has a \
		    $type vulnerability, see $url
	fi
done < ${PKGVULNDIR}/pkg-vulnerabilities