CVS commit: pkgsrc/doc

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Sat Oct 10 09:33:11 UTC 2026

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
According to CVE-2020-15778, this was fixed with openssh 8.3, so mark as such.


To generate a diff of this commit:
cvs rdiff -u -r1.802 -r1.803 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.802 pkgsrc/doc/pkg-vulnerabilities:1.803
--- pkgsrc/doc/pkg-vulnerabilities:1.802        Sat Oct 10 09:31:40 2026
+++ pkgsrc/doc/pkg-vulnerabilities      Sat Oct 10 09:33:10 2026
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.802 2026/10/10 09:31:40 he Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.803 2026/10/10 09:33:10 he Exp $
 #
 #FORMAT 1.0.0
 #
@@ -19708,7 +19708,7 @@ lua54<5.4.1             denial-of-service       https://n
 nodejs>=10<10.21.0     memory-corruption       https://nvd.nist.gov/vuln/detail/CVE-2020-8174
 nodejs>=12<12.18.0     memory-corruption       https://nvd.nist.gov/vuln/detail/CVE-2020-8174
 nodejs>=14<14.18.0     memory-corruption       https://nvd.nist.gov/vuln/detail/CVE-2020-8174
-openssh-[0-9]*         command-injection       https://nvd.nist.gov/vuln/detail/CVE-2020-15778
+openssh<8.3            command-injection       https://nvd.nist.gov/vuln/detail/CVE-2020-15778
 grafana<6.7.2          cross-site-scripting    https://nvd.nist.gov/vuln/detail/CVE-2020-11110
 libetpan-[0-9]*                man-in-the-middle       https://nvd.nist.gov/vuln/detail/CVE-2020-15953
 py{27,36,37,38}-uvicorn<0.11.7 escape-sequence-injection       https://nvd.nist.gov/vuln/detail/CVE-2020-7694