According to <https://www.netbsd.org/docs/pkgsrc/faq.html#audit-packages>, the vulnerability file is available at <ftp://ftp.NetBSD.org/pkgsrc/distfiles/pkg-vulnerabilities>. That URL is wrong. The right one is <ftp://ftp.netbsd.org/pub/NetBSD/packages/vulns/pkg-vulnerabilities>. Please, update the pkgsrc guide. Patch follows. Thanks. --- pkgsrc/doc/guide/files/faq.xml.orig 2020-05-09 00:53:28.561685222 +0200 +++ pkgsrc/doc/guide/files/faq.xml 2020-05-09 00:56:01.592211243 +0200 @@ -513,7 +513,7 @@ from the NetBSD ftp server:</para> <para><ulink - url="ftp://ftp.NetBSD.org/pkgsrc/distfiles/pkg-vulnerabilities"/></para> + url="ftp://ftp.NetBSD.org/pub/NetBSD/packages/vulns/pkg-vulnerabilities"/></para> </listitem> <listitem> -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea%jcea.es@localhost - https://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea%jabber.org@localhost _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
Attachment:
signature.asc
Description: OpenPGP digital signature