CVS commit: pkgsrc/doc

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Fri Dec 22 18:31:00 UTC 2023

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
vulnerability entries for mysqld_exporter and postgres_exporter


To generate a diff of this commit:
cvs rdiff -u -r1.89 -r1.90 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.89 pkgsrc/doc/pkg-vulnerabilities:1.90
--- pkgsrc/doc/pkg-vulnerabilities:1.89 Fri Dec 22 17:35:19 2023
+++ pkgsrc/doc/pkg-vulnerabilities      Fri Dec 22 18:31:00 2023
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.89 2023/12/22 17:35:19 wiz Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.90 2023/12/22 18:31:00 bsiegert Exp $
 #
 #FORMAT 1.0.0
 #
@@ -25818,3 +25818,7 @@ dropbear<2022.83nb1     extension-negotiatio
 erlang<26.2.1  extension-negotiation-downgrade https://nvd.nist.gov/vuln/detail/CVE-2023-48795
 libssh2<1.11.0nb2      extension-negotiation-downgrade https://nvd.nist.gov/vuln/detail/CVE-2023-48795
 postfix<3.8.4  email-spoofing  https://www.postfix.org/smtp-smuggling.html
+mysqld_exporter<0.15.1 auth-bypass     https://pkg.go.dev/vuln/GO-2022-1130
+mysqld_exporter<0.15.1 denial-of-service       https://pkg.go.dev/vuln/GO-2023-1571
+postgres_exporter<0.15.0       auth-bypass     https://pkg.go.dev/vuln/GO-2022-1130
+postgres_exporter<0.15.0       denial-of-service       https://pkg.go.dev/vuln/GO-2023-1571