From 26f04746444b29ae4678709df67ec7a71bdfc51b Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Sun, 11 Oct 2026 14:36:15 +1300 Subject: [PATCH] libssh: mark CVEs patched Changelog[1] also confirms the fix. Details: https://nvd.nist.gov/vuln/detail/cve-2026-59843 https://nvd.nist.gov/vuln/detail/cve-2026-59844 https://nvd.nist.gov/vuln/detail/cve-2026-59845 https://nvd.nist.gov/vuln/detail/cve-2026-59846 https://nvd.nist.gov/vuln/detail/cve-2026-59848 https://nvd.nist.gov/vuln/detail/cve-2026-59850 [1]https://gitlab.com/libssh/libssh-mirror/-/blob/libssh-0.11.5/CHANGELOG?ref_type=tags Signed-off-by: Ankur Tyagi --- meta-oe/recipes-support/libssh/libssh_0.11.5.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb index 738f8b1731..a99c4ee788 100644 --- a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb +++ b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb @@ -50,3 +50,9 @@ do_install_ptest () { BBCLASSEXTEND = "native nativesdk" CVE_STATUS[CVE-2025-14821] = "not-applicable-platform: issue only applies on Windows" +CVE_STATUS[CVE-2026-59843] = "fixed-version: fixed in v0.11.5" +CVE_STATUS[CVE-2026-59844] = "fixed-version: fixed in v0.11.5" +CVE_STATUS[CVE-2026-59845] = "fixed-version: fixed in v0.11.5" +CVE_STATUS[CVE-2026-59846] = "fixed-version: fixed in v0.11.5" +CVE_STATUS[CVE-2026-59848] = "fixed-version: fixed in v0.11.5" +CVE_STATUS[CVE-2026-59850] = "fixed-version: fixed in v0.11.5"