Hi, I have a suggestion, not totally related. It would be nice to have a tool which does the same thing than portaudit for FreeBSD. This tool is simple: you launch it, and it lists which packages are vulnerable. That's way you don't need to wait for a package to be in -testing or in -stable to know whether there is a security issue. It could improve tests also. Because if the tool lists a package which is vulnerable, if it is in -testing and not yet in -stable, then more users will update it from testing.
I did not reply and created a new subject because I was not subscribed to the list. Documentation: freebsd.org/doc/handbook/security-portaudit.html
-- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel