nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

libssh2: patch CVE-2026-58050 and CVE-2026-58051

Browse Source 
patch source: https://github.com/libssh2/libssh2/issues/1925#issuecomment-4938515829

Fixes: CVE-2026-58050, CVE-2026-58051
This commit is contained in:
whispers
2026-07-20 14:35:26 -04:00
parent edc768bb34
commit 572bf8abb5
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
pkgs/by-name/li/libssh2/package.nix
View File

@@ -51,6 +51,18 @@ stdenv.mkDerivation (finalAttrs: {
url = "https://salsa.debian.org/debian/libssh2/-/raw/1d4906e6ebe85a9da2931ba33677ead96a61f07f/debian/patches/libssh-unconst-backport.patch";
hash = "sha256-jc01Fb70GbaD9+RYeSjRaLFBtKLiMPTMuXas21aC0Ag=";
})
# https://github.com/libssh2/libssh2/issues/1925#issuecomment-4938515829
(fetchurl {
name = "CVE-2026-58050.patch";
url = "https://raw.githubusercontent.com/JuliaPackaging/Yggdrasil/9404aa5dd96c945a790c425a5f49af19ed2a93b0/L/LibSSH2/LibSSH2%401.11/bundled/patches/CVE-2026-58050-3449752.patch";
hash = "sha256-BZ1ewZgrroev2gkJwdoHCMFJK4wiRmA/Y4tzwaQqBd8=";
})
(fetchurl {
name = "CVE-2026-58051.patch";
url = "https://github.com/JuliaPackaging/Yggdrasil/raw/9404aa5dd96c945a790c425a5f49af19ed2a93b0/L/LibSSH2/LibSSH2%401.11/bundled/patches/CVE-2026-58051-a9758da.patch";
hash = "sha256-fduXIH02uwzqWV2RDidZmaDBy51V8yuC4XKlGYacjxg=";
})
];
# this could be accomplished by updateAutotoolsGnuConfigScriptsHook, but that causes infinite recursion