CVS commit: pkgsrc/doc

["Patrick Welche" <prlw1%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   prlw1
Date:           Fri Oct  6 08:38:32 UTC 2023

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
doc: update exim fixed version for 3 of the CVEs


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.13 pkgsrc/doc/pkg-vulnerabilities:1.14
--- pkgsrc/doc/pkg-vulnerabilities:1.13 Thu Oct  5 19:06:44 2023
+++ pkgsrc/doc/pkg-vulnerabilities      Fri Oct  6 08:38:32 2023
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.13 2023/10/05 19:06:44 tm Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.14 2023/10/06 08:38:32 prlw1 Exp $
 #
 #FORMAT 1.0.0
 #
@@ -25300,9 +25300,9 @@ webkit-gtk<2.40.5       remote-code-execution   
 webkit-gtk<2.42.0      remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-41074
 webkit-gtk<2.42.1      remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-41993
 libvpx<1.13.0nb1       heap-corruption https://nvd.nist.gov/vuln/detail/CVE-2023-5217
-exim-[0-9]*    sensitive-information-disclosure        https://nvd.nist.gov/vuln/detail/CVE-2023-42114
-exim-[0-9]*    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42115
-exim-[0-9]*    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42116
+exim<4.96.1    sensitive-information-disclosure        https://nvd.nist.gov/vuln/detail/CVE-2023-42114
+exim<4.96.1    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42115
+exim<4.96.1    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42116
 exim-[0-9]*    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42117
 libspf2-[0-9]* remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42118
 exim-[0-9]*    sensitive-information-disclosure        https://nvd.nist.gov/vuln/detail/CVE-2023-42119