Portaudit
Portaudit checks installed packages for known vulnerabilities and generates reports including references to security advisories:
cd /usr/ports/ports-mgmt/portaudit
make install clean
Besides cvsup to keep your ports tree up to date, portaudit is extremely convenient for monitoring all installed packages.
portaudit -Fa
fetches the current database of known vulnerabilities, and
prints a vulnerability report for all installed packages.
