CVE-2020-17366 was fixed with the routinator 0.8.0 release,

[Havard Eidnes <he%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Havard Eidnes <he%NetBSD.org@localhost>
Pushed By:	he
Date:		Mon Dec 14 10:11:49 2020 +0100
Changeset:	b7a18395b8a21519c4ebc7f04fc311a79f0d64a7

Removed Files:
	routinator/TODO

Log Message:
CVE-2020-17366 was fixed with the routinator 0.8.0 release,

ref.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17366
https://github.com/NLnetLabs/routinator/issues/319
https://github.com/NLnetLabs/routinator/pull/371

so this is now dealt with; the current version of routinator is 0.8.2.

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=b7a18395b8a21519c4ebc7f04fc311a79f0d64a7

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 routinator/TODO | 2 --
 1 file changed, 2 deletions(-)

diffs:
diff --git a/routinator/TODO b/routinator/TODO
deleted file mode 100644
index 593dcb03e3..0000000000
--- a/routinator/TODO
+++ /dev/null
@@ -1,2 +0,0 @@
-This package has known vulnerabilities, please investigate and fix if possible:
-  CVE-2020-17366