diff --git a/pkgs/by-name/ce/ceph/package.nix b/pkgs/by-name/ce/ceph/package.nix
index 0da840296dec..fa04b53e9d2d 100644
--- a/pkgs/by-name/ce/ceph/package.nix
+++ b/pkgs/by-name/ce/ceph/package.nix
@@ -282,6 +282,7 @@ let
             inherit version;
             hash = "sha256-hBSYub7GFiOxtsR+u8AjZ8B9YODhlfGXkIF/EMyNsLc=";
           };
+          patches = []; # those two CVE patches do not apply (!)
           disabledTests = old.disabledTests or [ ] ++ [
             "test_export_md5_digest"
           ];