CVS commit: pkgsrc/doc

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Fri Jun  7 06:49:55 UTC 2024

Modified Files:
        pkgsrc/doc: TODO pkg-vulnerabilities

Log Message:
doc: add one of the new php vulns


To generate a diff of this commit:
cvs rdiff -u -r1.24486 -r1.24487 pkgsrc/doc/TODO
cvs rdiff -u -r1.204 -r1.205 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/TODO
diff -u pkgsrc/doc/TODO:1.24486 pkgsrc/doc/TODO:1.24487
--- pkgsrc/doc/TODO:1.24486     Thu Jun  6 19:12:11 2024
+++ pkgsrc/doc/TODO     Fri Jun  7 06:49:54 2024
@@ -1,4 +1,4 @@
-$NetBSD: TODO,v 1.24486 2024/06/06 19:12:11 wiz Exp $
+$NetBSD: TODO,v 1.24487 2024/06/07 06:49:54 wiz Exp $
 
 Suggested new packages
 ======================
@@ -947,6 +947,7 @@ For possible Perl packages updates, see 
        o monocypher-3.1.2
        o mopher-0.6.0
        o moserial-2.30.0
+       o mozilla-rootcerts-1.0.20240531
        o mserv-devel-0.41
        o mtail-1.2.0
        o multitail-6.4.2

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.204 pkgsrc/doc/pkg-vulnerabilities:1.205
--- pkgsrc/doc/pkg-vulnerabilities:1.204        Thu Jun  6 07:46:05 2024
+++ pkgsrc/doc/pkg-vulnerabilities      Fri Jun  7 06:49:54 2024
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.204 2024/06/06 07:46:05 wiz Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.205 2024/06/07 06:49:54 wiz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -26020,3 +26020,6 @@ lighttpd-[0-9]* sensitive-information-di
 libarchive<3.7.4       out-of-bounds-access    https://nvd.nist.gov/vuln/detail/CVE-2024-26256
 nginx<1.26.1   denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2024-31079
 nginx<1.26.1   information-disclosure  https://nvd.nist.gov/vuln/detail/CVE-2024-34161
+php>=8.1<8.1.29        argument-injection      https://nvd.nist.gov/vuln/detail/CVE-2024-4577
+php>=8.2<8.2.20        argument-injection      https://nvd.nist.gov/vuln/detail/CVE-2024-4577
+php>=8.3<8.3.8 argument-injection      https://nvd.nist.gov/vuln/detail/CVE-2024-4577