From d3bdeb580bfe78a74f875d923fef55d27cb3d11e Mon Sep 17 00:00:00 2001
From: Samuel Dionne-Riel <samuel.dionne-riel@cyberus-technology.de>
Date: Tue, 28 Jul 2026 09:56:57 -0400
Subject: [PATCH] libssh: 0.12.1 -> 0.12.2

https://www.libssh.org/2026/07/28/libssh-0-12-2-security-release/

Fixes:
CVE-2026-59843: Denial of service via zero advertised channel packet size
---
 pkgs/by-name/li/libssh/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libssh/package.nix b/pkgs/by-name/li/libssh/package.nix
index b8a4ef7a8f92..c98fe05e6f7c 100644
--- a/pkgs/by-name/li/libssh/package.nix
+++ b/pkgs/by-name/li/libssh/package.nix
@@ -19,11 +19,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libssh";
-  version = "0.12.1";
+  version = "0.12.2";
 
   src = fetchurl {
     url = "https://www.libssh.org/files/${lib.versions.majorMinor finalAttrs.version}/libssh-${finalAttrs.version}.tar.xz";
-    hash = "sha256-05Qa8KLXjV2C7Xo2mI6RM5lDEvA1uWWabkP42zloeEw=";
+    hash = "sha256-SVYPZ32W43BqkErC3hEW4l82gJN9UeXJIZj8ukocHp8=";
   };
 
   outputs = [