CVS commit: pkgsrc/doc

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Wed Dec 10 10:01:37 UTC 2025

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
pkg-vulnerabilities: add last day CVEs

+ libcares, mongodb, p5-Plack-Middleware-Session, powerdns-recursor


To generate a diff of this commit:
cvs rdiff -u -r1.680 -r1.681 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.680 pkgsrc/doc/pkg-vulnerabilities:1.681
--- pkgsrc/doc/pkg-vulnerabilities:1.680        Mon Dec  8 13:16:00 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Wed Dec 10 10:01:36 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.680 2025/12/08 13:16:00 leot Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.681 2025/12/10 10:01:36 leot Exp $
 #
 #FORMAT 1.0.0
 #
@@ -29074,3 +29074,8 @@ php{56,74,81,82,83,84}-nextcloud<31.0.1 
 php{56,74,81,82,83,84}-nextcloud>=32<32.0.1    insufficient-logging    https://nvd.nist.gov/vuln/detail/CVE-2025-66552
 py{27,39,310,311,312,313,314}-urllib3<2.6.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-66418
 py{27,39,310,311,312,313,314}-urllib3<2.6.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-66471
+libcares<1.34.6        denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-62408
+mongodb<7.0.26 improper-locking        https://nvd.nist.gov/vuln/detail/CVE-2025-14345
+p5-Plack-Middleware-Session<0.17       timing-side-channel     https://nvd.nist.gov/vuln/detail/CVE-2013-10031
+powerdns-recursor>=5.3<5.3.22          denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-59029
+powerdns-recursor<5.3.2                        denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-59030