CVS commit: pkgsrc/doc

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Nov 23 08:28:44 UTC 2024

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
doc: fix two nodejs entries


To generate a diff of this commit:
cvs rdiff -u -r1.278 -r1.279 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.278 pkgsrc/doc/pkg-vulnerabilities:1.279
--- pkgsrc/doc/pkg-vulnerabilities:1.278        Mon Nov 18 23:01:27 2024
+++ pkgsrc/doc/pkg-vulnerabilities      Sat Nov 23 08:28:44 2024
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.278 2024/11/18 23:01:27 wiz Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.279 2024/11/23 08:28:44 wiz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -14529,8 +14529,7 @@ postgresql10-server<10.3        multiple-vulner
 binutils<2.31  null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2018-7642
 binutils<2.31  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2018-7643
 openjpeg<2.3.1 buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2018-7648
-nodejs>=8      denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2018-7651
-nodejs>=9      denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2018-7651
+nodejs>=8<11   denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2018-7651
 xv<3.10anb24   out-of-bounds-write     https://nvd.nist.gov/vuln/detail/CVE-2017-18215
 tor<0.2.9.25           denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2018-0490
 tor>=0.3.1<0.3.1.10    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2018-0490
@@ -24953,7 +24952,7 @@ confuse-[0-9]*  heap-based-buffer-overflo
 frr<8.4        denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2022-37032
 nodejs>=14<14.21.1     arbitrary-command-injection     https://nvd.nist.gov/vuln/detail/CVE-2022-43548
 nodejs>=16<16.18.1     arbitrary-command-injection     https://nvd.nist.gov/vuln/detail/CVE-2022-43548
-nodejs>=18.18.12.1     arbitrary-command-injection     https://nvd.nist.gov/vuln/detail/CVE-2022-43548
+nodejs>=18<18.12.1     arbitrary-command-injection     https://nvd.nist.gov/vuln/detail/CVE-2022-43548
 nodejs<16.17.1 http-request-smuggling  https://nvd.nist.gov/vuln/detail/CVE-2022-35256
 nodejs>=18<18.9.1      http-request-smuggling  https://nvd.nist.gov/vuln/detail/CVE-2022-35256
 nodejs<16.17.1 insufficiently-random-numbers   https://nvd.nist.gov/vuln/detail/CVE-2022-35255