Re: CVS commit: pkgsrc/net/py-rpyc

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Hello Pierre,

Pierre Pronchery writes:
> [...]
> Log Message:
> py-rpyc: import version 3.3.0
> [...]
> Index: pkgsrc/net/py-rpyc/TODO
> diff -u /dev/null pkgsrc/net/py-rpyc/TODO:1.1
> --- /dev/null Tue Sep 29 02:29:08 2020
> +++ pkgsrc/net/py-rpyc/TODO   Tue Sep 29 02:29:07 2020
> @@ -0,0 +1,2 @@
> +This package has known vulnerabilities, please investigate and fix if possible:
> +  CVE-2019-16328

Packages in pkgsrc do not have any TODO usually and we track security
issues via TODO files only in pkgsrc-wip.
Please add a corresponding entry in pkg-vulnerabilities and then remove
this TODO if the vulnerability is still present so users installing
py-rpyc can be aware of it.


Thanks!