CVS commit: pkgsrc/doc

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/doc
From: "Havard Eidnes" <he%netbsd.org@localhost>
Date: Thu, 27 Aug 2026 15:04:54 +0000

Module Name:    pkgsrc
Committed By:   he
Date:           Thu Aug 27 15:04:54 UTC 2026

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
Change URLs for rust-openssl issue fixed in 0.10.78 from

  https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
to
  https://nvd.nist.gov/vuln/detail/CVE-2026-41681

and category from "unknown" to "stack-overflow", based on
input from wiz@.

Make some of the entries more specific, since in a few cases the
newer versions of the openssl crate has been included in updated
versions now in pkgsrc.  The amended packages in this way are:

arti
chess-tui (openssl crate not used in newest versions)
py314-maturin
routinator
vaultwarden


To generate a diff of this commit:
cvs rdiff -u -r1.780 -r1.781 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.780 pkgsrc/doc/pkg-vulnerabilities:1.781
--- pkgsrc/doc/pkg-vulnerabilities:1.780        Mon Aug 17 17:11:00 2026
+++ pkgsrc/doc/pkg-vulnerabilities      Thu Aug 27 15:04:53 2026
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.780 2026/08/17 17:11:00 leot Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.781 2026/08/27 15:04:53 he Exp $
 #
 #FORMAT 1.0.0
 #
@@ -30310,65 +30310,65 @@ SOGo<5.12.5           security-bypass         https://nv
 awstats-[0-9]*         command-injection       https://nvd.nist.gov/vuln/detail/CVE-2025-63261
 ruby32-*       eol     https://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
 opensmtpd<7.8.0p1      denial-of-service       https://www.openbsd.org/errata78.html
-arti-[0-9]*    unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-asuka-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-bulletty<0.3.0 unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-cargo-c<0.10.22        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-cargo-licenses-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-cargo-nextest<0.9.135  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-cargo-outdated-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-cargo-upgrades-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-carwash-[0-9]* unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-castor-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-chess-tui-[0-9]*       unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-crates-io-cli-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-defguard-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-eilmeldung<1.5.0       unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-endbasic-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-flawz<0.4.1    unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-gitnr-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-iamb-[0-9]*    unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-kaput-cli-[0-9]*       unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-librespot-[0-9]*       unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-meli-[0-9]*    unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-mise<2026.4.20 unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-mktool<1.5.8   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-moccasin-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-monolith-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-ncspot<1.3.4   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-nushell<0.113.0        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-oatbar-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-phetch-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-pijul-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-py314-cryptography<48.0.0      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-py314-maturin-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-routinator-[0-9]*      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-rust-kanban-[0-9]*     unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-rustdesk-server-[0-9]* unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-saturn-cli-[0-9]*      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-sccache-[0-9]* unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-seaward-[0-9]* unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-sequoia-chameleon-gnupg-[0-9]* unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-sequoia-sq-[0-9]*      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-sniffnet<1.5.0 unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-so-[0-9]*      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-spotify-player<0.24.1  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-spotifyd-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-suckit-[0-9]*  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-taplo-cli-[0-9]*       unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-tealdeer-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-termscp<1.1.1  unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-termusic<0.13.2        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-twitch-tui-[0-9]*      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-typst<0.15.1   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-usenet_reborn-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-vaultwarden-[0-9]*     unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-wezterm-[0-9]* unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-wiki-tui-[0-9]*        unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-wthrr-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-xh<0.26.2      unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-yaydl-[0-9]*   unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
-zola-[0-9]*    unknown https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78
+arti<2.4.0     stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+asuka-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+bulletty<0.3.0 stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+cargo-c<0.10.22        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+cargo-licenses-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+cargo-nextest<0.9.135  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+cargo-outdated-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+cargo-upgrades-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+carwash-[0-9]* stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+castor-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+chess-tui<2.7.0                stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+crates-io-cli-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+defguard<2.0.3 stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+eilmeldung<1.5.0       stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+endbasic-[0-9]*        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+flawz<0.4.1    stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+gitnr-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+iamb-[0-9]*    stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+kaput-cli-[0-9]*       stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+librespot-[0-9]*       stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+meli-[0-9]*    stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+mise<2026.4.20 stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+mktool<1.5.8   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+moccasin-[0-9]*        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+monolith-[0-9]*        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+ncspot<1.3.4   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+nushell<0.113.0        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+oatbar-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+phetch-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+pijul-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+py314-cryptography<48.0.0      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+py314-maturin<1.13.2   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+routinator<0.15.2      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+rust-kanban-[0-9]*     stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+rustdesk-server-[0-9]* stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+saturn-cli-[0-9]*      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+sccache-[0-9]* stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+seaward-[0-9]* stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+sequoia-chameleon-gnupg-[0-9]* stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+sequoia-sq-[0-9]*      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+sniffnet<1.5.0 stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+so-[0-9]*      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+spotify-player<0.24.1  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+spotifyd-[0-9]*        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+suckit-[0-9]*  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+taplo-cli-[0-9]*       stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+tealdeer-[0-9]*        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+termscp<1.1.1  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+termusic<0.13.2        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+twitch-tui-[0-9]*      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+typst<0.15.1   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+usenet_reborn-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+vaultwarden<1.35.8     stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+wezterm-[0-9]* stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+wiki-tui-[0-9]*        stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+wthrr-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+xh<0.26.2      stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+yaydl-[0-9]*   stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
+zola-[0-9]*    stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2026-41681
 perl<5.42.2nb3 out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2026-12087
 jq<1.8.2       heap-overflow           https://nvd.nist.gov/vuln/detail/CVE-2026-32316
 jq<1.8.2       stack-overflow          https://nvd.nist.gov/vuln/detail/CVE-2026-33947

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/databases/openldap
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/databases/openldap
Indexes:

Home | Main Index | Thread Index | Old Index