Two of my machines (both running -current) give the following messages 
when I run audit-packages:

pkg_info: `[' not recognised
pkg_info: `]' not recognised
pkg_info: `*' not recognised

because of this entry:

cups<1.1.2[12]*         denial-of-service       http://www.cups.org/str.php?L104
2+P0+S-1+C0+I0+E0+Q1042 

I updated pkg_install, since it was slightly out of date and the 
message was coming from pkg_info (part of that package), but that 
doesn't seem to have solved the problem.

		--Prof. Steven M. Bellovin, http://www.cs.columbia.edu/~smb