CVS commit: pkgsrc/doc

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Sun Jun 21 10:54:52 UTC 2026

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
pkg-vulnerabilities: add recent jq vulnerabilities

Via jq-1.8.2 changelog.


To generate a diff of this commit:
cvs rdiff -u -r1.766 -r1.767 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.766 pkgsrc/doc/pkg-vulnerabilities:1.767
--- pkgsrc/doc/pkg-vulnerabilities:1.766        Thu Jun 18 16:01:36 2026
+++ pkgsrc/doc/pkg-vulnerabilities      Sun Jun 21 10:54:52 2026
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.766 2026/06/18 16:01:36 he Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.767 2026/06/21 10:54:52 leot Exp $
 #
 #FORMAT 1.0.0
 #
@@ -30371,3 +30371,19 @@ xh-[0-9]*      unknown https://github.com/rus
 yaydl-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
 zola-[0-9]*    unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
 perl<5.42.2nb3 out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2026-12087
+jq<1.8.2       heap-overflow           https://nvd.nist.gov/vuln/detail/CVE-2026-32316
+jq<1.8.2       stack-overflow          https://nvd.nist.gov/vuln/detail/CVE-2026-33947
+jq<1.8.2       input-validation        https://nvd.nist.gov/vuln/detail/CVE-2026-33948
+jq<1.8.2       input-validation        https://nvd.nist.gov/vuln/detail/CVE-2026-39956
+jq<1.8.2       out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2026-39979
+jq<1.8.2       denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2026-40164
+jq<1.8.2       stack-overflow          https://nvd.nist.gov/vuln/detail/CVE-2026-40612
+jq<1.8.2       input-validation        https://nvd.nist.gov/vuln/detail/CVE-2026-41256
+jq<1.8.2       integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2026-41257
+jq<1.8.2       input-validation        https://nvd.nist.gov/vuln/detail/CVE-2026-43894
+jq<1.8.2       input-validation        https://nvd.nist.gov/vuln/detail/CVE-2026-43895
+jq<1.8.2       input-validation        https://nvd.nist.gov/vuln/detail/CVE-2026-43896
+jq<1.8.2       stack-overflow          https://nvd.nist.gov/vuln/detail/CVE-2026-44777
+jq<1.8.2       denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2026-47770
+jq<1.8.2       heap-overflow           https://nvd.nist.gov/vuln/detail/CVE-2026-49839
+jq<1.8.2       denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2026-54679