mirror of
https://git.yoctoproject.org/poky
synced 2026-10-16 17:27:06 +00:00
Backport the upstream fix for CVE-2026-58051 using the commit in [1]. The CVE advisory [2] describes an uninitialized publickey-list entry cleanup issue affecting libssh2 through 1.11.1. [1] https://github.com/libssh2/libssh2/commit/a9758da45a52bc8c630ec9493804d0c6ea30b24a [2] https://nvd.nist.gov/vuln/detail/CVE-2026-58051 (From OE-Core rev: 19c481ffd3824512eb85845f04ae7b08b947b4f6) Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>