CVS commit: pkgsrc/doc

["Dr. Thomas Orgis" <thor%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   thor
Date:           Sat Dec 23 20:23:40 UTC 2023

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
pkg-vulnerabilities: set affected R version < 3.3.3 instead of dropping the line

Sorry. According to

        https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857466

3.3.3 was the upstream release fixing it. Not seeing this in NEWS in R sources,
though.


To generate a diff of this commit:
cvs rdiff -u -r1.95 -r1.96 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.95 pkgsrc/doc/pkg-vulnerabilities:1.96
--- pkgsrc/doc/pkg-vulnerabilities:1.95 Sat Dec 23 20:18:16 2023
+++ pkgsrc/doc/pkg-vulnerabilities      Sat Dec 23 20:23:40 2023
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.95 2023/12/23 20:18:16 bsiegert Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.96 2023/12/23 20:23:40 thor Exp $
 #
 #FORMAT 1.0.0
 #
@@ -11346,7 +11346,7 @@ libupnp<1.6.21  arbitrary-code-execution        
 tiff<4.0.6     denial-of-service       https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5315
 firefox45<45.8 multiple-vulnerabilities        https://www.mozilla.org/en-US/security/advisories/mfsa2017-06/
 webkit24-gtk{,3}-[0-9]*        denial-of-service       https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9643
-R-[0-9]*               buffer-overflow         https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8714
+R<3.3.3                buffer-overflow         https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-8714
 wavpack<5.1.0          denial-of-service       https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10169
 wavpack<5.1.0          denial-of-service       https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10170
 wavpack<5.1.0          denial-of-service       https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10171