[Slackbuilds-users] package auditing tool at slackbuilds.org
baildon.research at googlemail.com
Mon Sep 4 13:25:21 UTC 2017
On 4 September 2017 at 00:09, Donald Cooley <chytraeu at sdf.org> wrote:
> is there a tool that lists installed packages that are vulnerable
> against a database of some kind? I thought there was one I had used
> before, but I am unable to recall the name of it. I'm thinking of
> something similar to pkg audit of FreeBSD.
of course there are multiple issues to think about -- variations in
package naming and version parsing, whether one database is
sufficient, whether the vulnerabilities are realistic, whether our
builds are actually vulnerable...
The database for cve-check-tool is 550 Mb, but the FreeBSD database is
5Mb and the NetBSD database is less than 1.3 Mb. Hmmm.
More information about the SlackBuilds-users