CVS commit: pkgsrc/doc

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Dec 18 08:56:42 UTC 2023

Modified Files:
        pkgsrc/doc: TODO pkg-vulnerabilities

Log Message:
doc: new webkit version with some new CVEs


To generate a diff of this commit:
cvs rdiff -u -r1.23787 -r1.23788 pkgsrc/doc/TODO
cvs rdiff -u -r1.80 -r1.81 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/TODO
diff -u pkgsrc/doc/TODO:1.23787 pkgsrc/doc/TODO:1.23788
--- pkgsrc/doc/TODO:1.23787     Mon Dec 18 05:37:59 2023
+++ pkgsrc/doc/TODO     Mon Dec 18 08:56:42 2023
@@ -1,4 +1,4 @@
-$NetBSD: TODO,v 1.23787 2023/12/18 05:37:59 adam Exp $
+$NetBSD: TODO,v 1.23788 2023/12/18 08:56:42 wiz Exp $
 
 Suggested new packages
 ======================
@@ -1414,7 +1414,7 @@ For possible Perl packages updates, see 
        o wbm-virtual-server-6.16
        o wcalc-2.4
        o webkit-gtk-2.38.5 [wip]
-       o webkit-gtk-2.42.2
+       o webkit-gtk-2.42.4
        o webmin-2.0
        o websvn-2.6.0
        o wgetpaste-2.30

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.80 pkgsrc/doc/pkg-vulnerabilities:1.81
--- pkgsrc/doc/pkg-vulnerabilities:1.80 Sat Dec 16 07:08:54 2023
+++ pkgsrc/doc/pkg-vulnerabilities      Mon Dec 18 08:56:42 2023
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.80 2023/12/16 07:08:54 wiz Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.81 2023/12/18 08:56:42 wiz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -25804,3 +25804,5 @@ asterisk<18             eol             http://ftp.NetBSD.org/
 asterisk>=19<20                eol             http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
 jq<1.7.1               buffer-overflow http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-50246
 jq<1.7.1               buffer-overflow http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-50268
+webkit-gtk<2.42.4      denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-42883
+webkit-gtk<2.42.0      arbitrary-code-execution        https://nvd.nist.gov/vuln/detail/CVE-2023-42890