CVS commit: pkgsrc/doc

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Dec 18 19:25:13 UTC 2023

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
doc: add some ssh implementation vulns


To generate a diff of this commit:
cvs rdiff -u -r1.82 -r1.83 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.82 pkgsrc/doc/pkg-vulnerabilities:1.83
--- pkgsrc/doc/pkg-vulnerabilities:1.82 Mon Dec 18 10:27:11 2023
+++ pkgsrc/doc/pkg-vulnerabilities      Mon Dec 18 19:25:13 2023
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.82 2023/12/18 10:27:11 thor Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.83 2023/12/18 19:25:13 wiz Exp $
 #
 #FORMAT 1.0.0
 #
@@ -25806,3 +25806,9 @@ jq<1.7.1                buffer-overflow http://web.nvd
 jq<1.7.1               buffer-overflow http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-50268
 webkit-gtk<2.42.4      denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-42883
 webkit-gtk<2.42.0      arbitrary-code-execution        https://nvd.nist.gov/vuln/detail/CVE-2023-42890
+openssh<9.6    extension-negotiation-downgrade https://nvd.nist.gov/vuln/detail/CVE-2023-48795
+putty<0.80     extension-negotiation-downgrade https://nvd.nist.gov/vuln/detail/CVE-2023-48795
+py{38,39,310,311,321}-asyncssh<2.14.2  extension-negotiation-downgrade https://nvd.nist.gov/vuln/detail/CVE-2023-48795
+py{38,39,310,311,321}-asyncssh<2.14.2  extension-negotiation-attack    https://nvd.nist.gov/vuln/detail/CVE-2023-46445
+py{38,39,310,311,321}-asyncssh<2.14.2  session-attack  https://nvd.nist.gov/vuln/detail/CVE-2023-46446
+libssh<0.106   extension-negotiation-downgrade https://nvd.nist.gov/vuln/detail/CVE-2023-48795