From dc56cbbc023c67b7700cc51cd3e5b86b3e3c9904 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Sun, 11 Oct 2026 14:46:07 +1300 Subject: [PATCH] libssh: ignore CVE-2026-59851 GSSAPI Key Exchange was introduced in v0.12.0[1]. Debian also confirmed the same[2]. Details: https://nvd.nist.gov/vuln/detail/cve-2026-59851 [1]https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.12.0 [2]https://security-tracker.debian.org/tracker/CVE-2026-59851 Signed-off-by: Ankur Tyagi --- meta-oe/recipes-support/libssh/libssh_0.11.5.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb index a99c4ee788..a67956df88 100644 --- a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb +++ b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb @@ -56,3 +56,4 @@ CVE_STATUS[CVE-2026-59845] = "fixed-version: fixed in v0.11.5" CVE_STATUS[CVE-2026-59846] = "fixed-version: fixed in v0.11.5" CVE_STATUS[CVE-2026-59848] = "fixed-version: fixed in v0.11.5" CVE_STATUS[CVE-2026-59850] = "fixed-version: fixed in v0.11.5" +CVE_STATUS[CVE-2026-59851] = "cpe-incorrect: vulnerability doesn't exist in v0.11.5"