CVS commit: pkgsrc/doc

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Feb 22 16:18:10 UTC 2025

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
doc/pkg-vulnerabilities: add www/drupal11 vulnerabilities


To generate a diff of this commit:
cvs rdiff -u -r1.317 -r1.318 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.317 pkgsrc/doc/pkg-vulnerabilities:1.318
--- pkgsrc/doc/pkg-vulnerabilities:1.317        Fri Feb 21 21:46:47 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Sat Feb 22 16:18:09 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.317 2025/02/21 21:46:47 wiz Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.318 2025/02/22 16:18:09 taca Exp $
 #
 #FORMAT 1.0.0
 #
@@ -26131,3 +26131,6 @@ openssh<9.9p2   man-in-the-middle       https://
 openssh<9.9p2  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-26466
 exim<4.98.1    sql-injection   https://nvd.nist.gov/vuln/detail/CVE-2025-26794
 openh264<2.6.0 remote-heap-overflow    https://github.com/cisco/openh264/security/advisories/GHSA-m99q-5j7x-7m9x
+drupal>=11.1.0<11.1.3  cross-site-scripting    https://www.drupal.org/sa-core-2025-001
+drupal>=11.1.0<11.1.3  access-bypass   https://www.drupal.org/sa-core-2025-002
+drupal>=11.1.0<11.1.3  php-object-injection    https://www.drupal.org/sa-core-2025-003