[meta-oe,wrynose,4/33] libssh: mark CVEs patched

Message ID	20260907102318.2459883-4-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.214.176, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][wrynose][PATCH 4/33] libssh: mark CVEs patched Date: Mon, 7 Sep 2026 22:22:48 +1200 Message-ID: <20260907102318.2459883-4-ankur.tyagi85@gmail.com> In-Reply-To: <20260907102318.2459883-1-ankur.tyagi85@gmail.com> References: <20260907102318.2459883-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 \| expand [meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 [meta-oe,wrynose,2/33] libnfs: patch CVE-2026-57918 [meta-oe,wrynose,3/33] libssh: ignore CVE-2025-14821 [meta-oe,wrynose,4/33] libssh: mark CVEs patched [meta-oe,wrynose,5/33] libssh: ignore CVE-2025-59842 [meta-networking,wrynose,6/33] miniupnpd: patch CVE-2026-5720 [meta-python,wrynose,7/33] python3-zeroconf: patch CVE-2026-47180 [meta-python,wrynose,8/33] python3-zeroconf: patch CVE-2026-47183 [meta-python,wrynose,9/33] python3-zeroconf: patch CVE-2026-47184 [meta-oe,wrynose,10/33] valkey: mark CVE-2026-56684 and CVE-2026-63639 patched [meta-oe,wrynose,11/33] libyang: patch CVE-2026-41401 [meta-networking,wrynose,12/33] tinyproxy: patch CVE-2026-31842 [meta-networking,wrynose,13/33] tinyproxy: patch CVE-2026-54387 [meta-networking,wrynose,14/33] tinyproxy: patch CVE-2026-55202 [meta-webserver,wrynose,15/33] nginx: mark CVE-2026-1642 patched [meta-networking,wrynose,16/33] open62541: patch CVE-2026-11946 [meta-oe,wrynose,17/33] smarty: mark CVEs patched [meta-oe,wrynose,18/33] tesseract: patch CVE-2026-73066 [meta-oe,wrynose,19/33] tesseract: patch CVE-2026-73067 [meta-networking,wrynose,20/33] wolfssl: mark CVEs patched [meta-networking,wrynose,21/33] wolfssl: patch CVE-2026-10098 [meta-networking,wrynose,22/33] wolfssl: patch CVE-2026-10512 [meta-networking,wrynose,23/33] wolfssl: ignore CVE-2026-12340 [meta-networking,wrynose,24/33] wolfssl: patch CVE-2026-55958 [meta-networking,wrynose,25/33] wolfssl: patch CVE-2026-6091 [meta-networking,wrynose,26/33] wolfssl: patch CVE-2026-6092 [meta-networking,wrynose,27/33] wolfssl: patch CVE-2026-6094 [meta-networking,wrynose,28/33] wolfssl: patch CVE-2026-6291 [meta-networking,wrynose,29/33] wolfssl: patch CVE-2026-6325 [meta-networking,wrynose,30/33] wolfssl: patch CVE-2026-6412 [meta-networking,wrynose,31/33] wolfssl: patch CVE-2026-6450 [meta-networking,wrynose,32/33] wolfssl: patch CVE-2026-6731 [meta-networking,wrynose,33/33] wolfssl: patch CVE-2026-7531

Message ID

20260907102318.2459883-4-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][wrynose][PATCH 4/33] libssh: mark CVEs patched
Date: Mon,  7 Sep 2026 22:22:48 +1200
Message-ID: <20260907102318.2459883-4-ankur.tyagi85@gmail.com>
In-Reply-To: <20260907102318.2459883-1-ankur.tyagi85@gmail.com>
References: <20260907102318.2459883-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 | expand

Commit Message

Ankur Tyagi Sept. 7, 2026, 10:22 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog[1] also confirms the fix.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-15370
https://nvd.nist.gov/vuln/detail/cve-2026-59843
https://nvd.nist.gov/vuln/detail/cve-2026-59844
https://nvd.nist.gov/vuln/detail/cve-2026-59845
https://nvd.nist.gov/vuln/detail/cve-2026-59846
https://nvd.nist.gov/vuln/detail/cve-2026-59847
https://nvd.nist.gov/vuln/detail/cve-2026-59848
https://nvd.nist.gov/vuln/detail/cve-2026-59849
https://nvd.nist.gov/vuln/detail/cve-2026-59850

[1]https://gitlab.com/libssh/libssh-mirror/-/blob/libssh-0.11.5/CHANGELOG?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-support/libssh/libssh_0.11.5.bb | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
index 612cfdbb19..752bded528 100644
--- a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
+++ b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
@@ -49,3 +49,12 @@  do_install_ptest () {
 BBCLASSEXTEND = "native nativesdk"
 
 CVE_STATUS[CVE-2025-14821] = "not-applicable-platform: issue only applies on Windows"
+CVE_STATUS[CVE-2026-15370] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59843] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59844] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59845] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59846] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59847] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59848] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59849] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59850] = "fixed-version: fixed in v0.11.5"

[meta-oe,wrynose,4/33] libssh: mark CVEs patched

Commit Message

Patch