CVS commit: pkgsrc/doc

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Fri Oct 30 09:16:49 UTC 2026

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
add CVE-2026-111497 for brotli


To generate a diff of this commit:
cvs rdiff -u -r1.812 -r1.813 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.812 pkgsrc/doc/pkg-vulnerabilities:1.813
--- pkgsrc/doc/pkg-vulnerabilities:1.812        Wed Oct 28 10:09:34 2026
+++ pkgsrc/doc/pkg-vulnerabilities      Fri Oct 30 09:16:48 2026
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.812 2026/10/28 10:09:34 nia Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.813 2026/10/30 09:16:48 spz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -30495,3 +30495,4 @@ php74<7.4.33nb11        remote-code-execution   h
 php74<7.4.33nb11       remote-code-execution   https://www.cve.org/CVERecord?id=CVE-2026-109619
 php56<5.6.40nb7        remote-code-execution   https://www.cve.org/CVERecord?id=CVE-2026-109618
 php56<5.6.40nb7        remote-code-execution   https://www.cve.org/CVERecord?id=CVE-2026-109619
+brotli>=1.0.3<1.2.1    remote-code-execution   https://www.cve.org/CVERecord?id=CVE-2026-111497