Received: by mail.netbsd.org (Postfix, from userid 605) id 92D4884E69; Mon, 12 Feb 2024 08:54:33 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org; s=20240131; t=1707728073; bh=KvLZtaMpnfEqVn77q1sHBID0IyofYaRpR2ukMS6ODts=; h=Date:From:Subject:To:Reply-To:List-Id:List-Unsubscribe; b=uUqNuBpGg+kSOKm2MOa6/vqIVry4xSV47bseOebV0X30ukcwIhX/U9/9ifUgG2a4I jEGn/76DfcWFDc/HYSpuc//HLvLE2Qf5i1WwIAmj+MGk4buuDktGEA97c21OOUUoew Ps3+oISwpqqaSQBIlAbxFTuK17c2iZajOxA4v/2w= Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 8486B84E5D for ; Mon, 12 Feb 2024 08:54:32 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Authentication-Results: mail.netbsd.org (amavisd-new); dkim=pass (1024-bit key) header.d=netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id oQiXGlHp4eMM for ; Mon, 12 Feb 2024 08:54:32 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id CC7D984E19 for ; Mon, 12 Feb 2024 08:54:31 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org; s=20240131; t=1707728072; bh=KvLZtaMpnfEqVn77q1sHBID0IyofYaRpR2ukMS6ODts=; h=Date:From:Subject:To:Reply-To; b=FR34DHif5/MO8+dNNmkdzvoSTN8SjkZnBfqbCKEX0YHQu0gpefFrwWHjcGLAk/kGT D9Xk/ZIHVRV7/4GLUtH4nxyignuj0aaLcvvXCbIAzERg9lCZ82WrNFH78XM/vXczZo ao3ZojNW7aI7JxsVUXrJUMw2JlP1OaRUSyC1wk/w= Received: by cvs.NetBSD.org (Postfix, from userid 500) id BE916F9AB; Mon, 12 Feb 2024 08:54:31 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1707728071110160" MIME-Version: 1.0 Date: Mon, 12 Feb 2024 08:54:31 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/doc To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20240212085431.BE916F9AB@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1707728071110160 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Mon Feb 12 08:54:31 UTC 2024 Modified Files: pkgsrc/doc: pkg-vulnerabilities Log Message: doc: fix libuv minimal affected version To generate a diff of this commit: cvs rdiff -u -r1.123 -r1.124 pkgsrc/doc/pkg-vulnerabilities Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1707728071110160 Content-Disposition: inline Content-Length: 1337 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/doc/pkg-vulnerabilities diff -u pkgsrc/doc/pkg-vulnerabilities:1.123 pkgsrc/doc/pkg-vulnerabilities:1.124 --- pkgsrc/doc/pkg-vulnerabilities:1.123 Mon Feb 12 04:35:57 2024 +++ pkgsrc/doc/pkg-vulnerabilities Mon Feb 12 08:54:31 2024 @@ -1,4 +1,4 @@ -# $NetBSD: pkg-vulnerabilities,v 1.123 2024/02/12 04:35:57 jnemeth Exp $ +# $NetBSD: pkg-vulnerabilities,v 1.124 2024/02/12 08:54:31 wiz Exp $ # #FORMAT 1.0.0 # @@ -25873,7 +25873,7 @@ webkit-gtk<2.42.5 arbitrary-code-executi py{27,37,38,39,310,311,312}-django>=3.2<3.2.24 denial-of-service https://nvd.nist.gov/vuln/detail/CVE-2024-24680 py{27,37,38,39,310,311,312}-django>=4.1<4.2 denial-of-service https://nvd.nist.gov/vuln/detail/CVE-2024-24680 py{27,37,38,39,310,311,312}-django>=4.2<4.2.10 denial-of-service https://nvd.nist.gov/vuln/detail/CVE-2024-24680 -libuv>=1.45<1.48 address-check-bypass https://nvd.nist.gov/vuln/detail/CVE-2024-24806 +libuv>=1.24.0<1.48 address-check-bypass https://nvd.nist.gov/vuln/detail/CVE-2024-24806 postgresql-server>=12<12.18 arbitrary-command-execution https://nvd.nist.gov/vuln/detail/CVE-2024-0985 postgresql-server>=13<13.14 arbitrary-command-execution https://nvd.nist.gov/vuln/detail/CVE-2024-0985 postgresql-server>=14<14.11 arbitrary-command-execution https://nvd.nist.gov/vuln/detail/CVE-2024-0985 --_----------=_1707728071110160--