Hello. Trying to build bash, i found some vulnerable package. Generally, you only need to update the Makefile. * archivers/bzip2 http://cvsweb.netbsd.se/cgi-bin/bsdweb.cgi/pkgsrc/archivers/bzip2/Makefile.diff?r1=1.46;r2=1.47;f=h * devel/m4 http://cvsweb.netbsd.se/cgi-bin/bsdweb.cgi/pkgsrc/devel/m4/Makefile.diff?r1=1.52;r2=1.53;f=h;f=u Thanks.
For devel/m4, you also need to update the distinfo with http://cvsweb.netbsd.se/cgi-bin/bsdweb.cgi/pkgsrc/devel/m4/ distinfo.diff?r1=1.20;r2=1.21;f=h;f=u
And don't forget to remove the package's patch.