CVS commit: pkgsrc/doc

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed May  7 15:30:10 UTC 2025

Modified Files:
        pkgsrc/doc: TODO pkg-vulnerabilities

Log Message:
doc: new django versions out, fixing DOS problems


To generate a diff of this commit:
cvs rdiff -u -r1.25773 -r1.25774 pkgsrc/doc/TODO
cvs rdiff -u -r1.358 -r1.359 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/TODO
diff -u pkgsrc/doc/TODO:1.25773 pkgsrc/doc/TODO:1.25774
--- pkgsrc/doc/TODO:1.25773     Tue May  6 20:54:33 2025
+++ pkgsrc/doc/TODO     Wed May  7 15:30:09 2025
@@ -1,4 +1,4 @@
-$NetBSD: TODO,v 1.25773 2025/05/06 20:54:33 vins Exp $
+$NetBSD: TODO,v 1.25774 2025/05/07 15:30:09 wiz Exp $
 
 Suggested new packages
 ======================
@@ -504,7 +504,7 @@ For possible Perl packages updates, see 
        o camlp4-4.12
        o carbons-purple-0.2.3
        o cardboard-schedule-1.14c [at http://www.bright-green.com/downloads/]
-       o cargo-c-0.10.12 [wip, needs rust 1.83]
+       o cargo-c-0.10.12 [wip]
        o cddbd-1.5.2
        o cdrdao-1.2.5
        o cdrkit-1.1.10
@@ -1123,6 +1123,8 @@ For possible Perl packages updates, see 
        o py-OTXv2-1.5.2
        o py-cassa-1.11.0
        o py-configparser-5.0.0 [drops python-2.x support; pkgsrc only needs this package for python 2.x]
+       o py-django-5.2.1
+       o py-django4-4.2.21
        o py-ephem3-3.7.6.0
        o py-fecon235-6.18.1203
        o py-filebytes-0.10.2

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.358 pkgsrc/doc/pkg-vulnerabilities:1.359
--- pkgsrc/doc/pkg-vulnerabilities:1.358        Sun May  4 11:20:27 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Wed May  7 15:30:10 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.358 2025/05/04 11:20:27 nia Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.359 2025/05/07 15:30:10 wiz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -26174,3 +26174,5 @@ fcgi<2.4.5      integer-overflow        https://nvd.
 py{39,310,311,312,313}-h11<0.16.0      request-smuggling       https://nvd.nist.gov/vuln/detail/CVE-2025-43859
 dnsdist<1.9.9  use-after-free          https://nvd.nist.gov/vuln/detail/CVE-2025-30194
 liboqs<0.13.0  information-disclosure  https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/Wiu4ZQo3fP8
+py{39,310,311,312,313}-django<4.2.21   denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-32873
+py{39,310,311,312,313}-django>=5<5.2.1 denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-32873