CVS commit: pkgsrc/doc

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Jun 18 13:44:44 UTC 2025

Modified Files:
        pkgsrc/doc: TODO pkg-vulnerabilities

Log Message:
doc: add one (each) of the new xserver/xwayland vulnerabilities


To generate a diff of this commit:
cvs rdiff -u -r1.25897 -r1.25898 pkgsrc/doc/TODO
cvs rdiff -u -r1.426 -r1.427 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/TODO
diff -u pkgsrc/doc/TODO:1.25897 pkgsrc/doc/TODO:1.25898
--- pkgsrc/doc/TODO:1.25897     Tue Jun 17 06:28:14 2025
+++ pkgsrc/doc/TODO     Wed Jun 18 13:44:44 2025
@@ -1,4 +1,4 @@
-$NetBSD: TODO,v 1.25897 2025/06/17 06:28:14 wiz Exp $
+$NetBSD: TODO,v 1.25898 2025/06/18 13:44:44 wiz Exp $
 
 Suggested new packages
 ======================
@@ -923,7 +923,8 @@ For possible Perl packages updates, see 
        o mipsel-none-elf-binutils-2.36.1
        o mipsel-none-elf-gcc-9.3.0
        o mit-scheme-bin-9.2
-       o modular-xorg-xwayland-24.1.6
+       o modular-xorg-server-21.1.17
+       o modular-xorg-xwayland-24.1.7
        o mono-6.14
        o mono-nat-1.1.0
        o monocypher-3.1.2
@@ -1139,6 +1140,7 @@ For possible Perl packages updates, see 
        o py-torch-2.6
        o py-trezor-0.13.10
        o py-uliweb-0.6
+       o py-wat-0.6.0
        o py-yubiauth-0.3.10
        o py-zipp-3.23.0
        o pythontidy-1.23

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.426 pkgsrc/doc/pkg-vulnerabilities:1.427
--- pkgsrc/doc/pkg-vulnerabilities:1.426        Tue Jun 17 14:01:53 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Wed Jun 18 13:44:44 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.426 2025/06/17 14:01:53 leot Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.427 2025/06/18 13:44:44 wiz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -26419,3 +26419,5 @@ salt<3007.4     arbitrary-file-deletion         htt
 salt<3007.4    arbitrary-file-overwrite        https://nvd.nist.gov/vuln/detail/CVE-2025-22241
 salt<3007.4    denial-of-service               https://nvd.nist.gov/vuln/detail/CVE-2025-22242
 spdlog<1.15.2  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-6140
+modular-xorg-server<21.1.17    use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2025-49175
+modular-xorg-xwayland<24.1.7   use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2025-49175