CVS commit: pkgsrc/doc

["Robert Bagdan" <kikadf%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kikadf
Date:           Fri Oct 17 06:25:07 UTC 2025

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
doc/pkg-vulnerabilities: restrict amfora patterns

GO-2021-0238: fixed in go115-1.15.12, go116-1.16.4, amfora-1.10.0 already depend for go117


To generate a diff of this commit:
cvs rdiff -u -r1.629 -r1.630 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.629 pkgsrc/doc/pkg-vulnerabilities:1.630
--- pkgsrc/doc/pkg-vulnerabilities:1.629        Fri Oct 17 06:23:05 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Fri Oct 17 06:25:07 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.629 2025/10/17 06:23:05 kikadf Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.630 2025/10/17 06:25:07 kikadf Exp $
 #
 #FORMAT 1.0.0
 #
@@ -25799,7 +25799,7 @@ packer<1.9.5    man-in-the-middle       https://p
 ssh-chat-[0-9]*        man-in-the-middle       https://pkg.go.dev/vuln/GO-2023-2402
 influxdb-[0-9]*        denial-of-service       https://pkg.go.dev/vuln/GO-2023-1571
 lazygit-[0-9]* man-in-the-middle       https://pkg.go.dev/vuln/GO-2023-2402
-amfora-[0-9]*  infinite-loop   https://pkg.go.dev/vuln/GO-2021-0238
+amfora<1.10.0  infinite-loop   https://pkg.go.dev/vuln/GO-2021-0238
 hub-[0-9]*     denial-of-service       https://pkg.go.dev/vuln/GO-2021-0061
 nats-server-[0-9]*     permissions-checking    https://pkg.go.dev/vuln/GO-2022-0386
 obfs4proxy-[0-9]*      denial-of-service       https://pkg.go.dev/vuln/GO-2023-1571