CVS commit: pkgsrc/doc

["Amitai Schleier" <schmonz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   schmonz
Date:           Sun Oct  8 17:58:17 UTC 2023

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
libspf2 CVE-2023-42118 believed fixed in 1.2.11nb2.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.14 pkgsrc/doc/pkg-vulnerabilities:1.15
--- pkgsrc/doc/pkg-vulnerabilities:1.14 Fri Oct  6 08:38:32 2023
+++ pkgsrc/doc/pkg-vulnerabilities      Sun Oct  8 17:58:17 2023
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.14 2023/10/06 08:38:32 prlw1 Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.15 2023/10/08 17:58:17 schmonz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -25304,7 +25304,7 @@ exim<4.96.1     sensitive-information-disclo
 exim<4.96.1    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42115
 exim<4.96.1    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42116
 exim-[0-9]*    remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42117
-libspf2-[0-9]* remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42118
+libspf2<1.2.11nb2      remote-code-execution   https://nvd.nist.gov/vuln/detail/CVE-2023-42118
 exim-[0-9]*    sensitive-information-disclosure        https://nvd.nist.gov/vuln/detail/CVE-2023-42119
 gst-plugins1-bad<1.22.6        buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-40474
 gst-plugins1-bad<1.22.6        buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-40475