CVS commit: pkgsrc/doc

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Mon Oct  6 09:56:20 UTC 2025

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
pkg-vulnerabilities: limit some old ffmpeg patterns

All of them via <https://www.ffmpeg.org/security.html> (there are
probably older wildcards that should be limited as well for older
ffmpeg versions).


To generate a diff of this commit:
cvs rdiff -u -r1.583 -r1.584 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.583 pkgsrc/doc/pkg-vulnerabilities:1.584
--- pkgsrc/doc/pkg-vulnerabilities:1.583        Mon Oct  6 09:52:13 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Mon Oct  6 09:56:20 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.583 2025/10/06 09:52:13 leot Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.584 2025/10/06 09:56:20 leot Exp $
 #
 #FORMAT 1.0.0
 #
@@ -24396,11 +24396,12 @@ samba>=4.16.0<4.16.6  denial-of-service       h
 samba>=4.17.0<4.17.2   denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2022-3437
 samba>=4.17.0<4.17.2   symlink-attack  https://nvd.nist.gov/vuln/detail/CVE-2022-3592
 samba-[0-9]*   sensitive-information-leak      https://nvd.nist.gov/vuln/detail/CVE-2018-14628
-ffmpeg5-[0-9]* out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2022-3965
-ffmpeg4-[0-9]* out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2022-3964
-ffmpeg3-[0-9]* null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2022-3109
+ffmpeg4<4.4.4  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2022-3964
+ffmpeg5<5.1.3  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2022-3964
+ffmpeg5<5.1.3  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2022-3965
+ffmpeg3<3.4.13 null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2022-3109
 ffmpeg5<5.1    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2022-3341
-ffmpeg5-[0-9]* out-of-bounds-write     https://nvd.nist.gov/vuln/detail/CVE-2022-2566
+ffmpeg5<5.1.1  out-of-bounds-write     https://nvd.nist.gov/vuln/detail/CVE-2022-2566
 sqlite3<3.40.1 unspecified     https://nvd.nist.gov/vuln/detail/CVE-2022-46908
 sqlite3<3.32.0 out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2020-35527
 sqlite3<3.32.0 null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2020-35525