diff mbox series

[meta-oe,wrynose,5/33] libssh: ignore CVE-2025-59842

Message ID	20260907102318.2459883-5-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.216.42, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][wrynose][PATCH 5/33] libssh: ignore CVE-2025-59842 Date: Mon, 7 Sep 2026 22:22:49 +1200 Message-ID: <20260907102318.2459883-5-ankur.tyagi85@gmail.com> In-Reply-To: <20260907102318.2459883-1-ankur.tyagi85@gmail.com> References: <20260907102318.2459883-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 \| expand [meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 [meta-oe,wrynose,2/33] libnfs: patch CVE-2026-57918 [meta-oe,wrynose,3/33] libssh: ignore CVE-2025-14821 [meta-oe,wrynose,4/33] libssh: mark CVEs patched [meta-oe,wrynose,5/33] libssh: ignore CVE-2025-59842 [meta-networking,wrynose,6/33] miniupnpd: patch CVE-2026-5720 [meta-python,wrynose,7/33] python3-zeroconf: patch CVE-2026-47180 [meta-python,wrynose,8/33] python3-zeroconf: patch CVE-2026-47183 [meta-python,wrynose,9/33] python3-zeroconf: patch CVE-2026-47184 [meta-oe,wrynose,10/33] valkey: mark CVE-2026-56684 and CVE-2026-63639 patched [meta-oe,wrynose,11/33] libyang: patch CVE-2026-41401 [meta-networking,wrynose,12/33] tinyproxy: patch CVE-2026-31842 [meta-networking,wrynose,13/33] tinyproxy: patch CVE-2026-54387 [meta-networking,wrynose,14/33] tinyproxy: patch CVE-2026-55202 [meta-webserver,wrynose,15/33] nginx: mark CVE-2026-1642 patched [meta-networking,wrynose,16/33] open62541: patch CVE-2026-11946 [meta-oe,wrynose,17/33] smarty: mark CVEs patched [meta-oe,wrynose,18/33] tesseract: patch CVE-2026-73066 [meta-oe,wrynose,19/33] tesseract: patch CVE-2026-73067 [meta-networking,wrynose,20/33] wolfssl: mark CVEs patched [meta-networking,wrynose,21/33] wolfssl: patch CVE-2026-10098 [meta-networking,wrynose,22/33] wolfssl: patch CVE-2026-10512 [meta-networking,wrynose,23/33] wolfssl: ignore CVE-2026-12340 [meta-networking,wrynose,24/33] wolfssl: patch CVE-2026-55958 [meta-networking,wrynose,25/33] wolfssl: patch CVE-2026-6091 [meta-networking,wrynose,26/33] wolfssl: patch CVE-2026-6092 [meta-networking,wrynose,27/33] wolfssl: patch CVE-2026-6094 [meta-networking,wrynose,28/33] wolfssl: patch CVE-2026-6291 [meta-networking,wrynose,29/33] wolfssl: patch CVE-2026-6325 [meta-networking,wrynose,30/33] wolfssl: patch CVE-2026-6412 [meta-networking,wrynose,31/33] wolfssl: patch CVE-2026-6450 [meta-networking,wrynose,32/33] wolfssl: patch CVE-2026-6731 [meta-networking,wrynose,33/33] wolfssl: patch CVE-2026-7531

Commit Message

Ankur Tyagi Sept. 7, 2026, 10:22 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

The vulnerability exists in GSSAPI key exchange introduced in v0.12.0[1]
Also confirmed by libssh security advisory[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-59842

[1]https://gitlab.com/libssh/libssh-mirror/-/commit/88c2ea6752fab7b3da9cc4c51eaf632361a44080
[2]https://www.libssh.org/security/advisories/CVE-2026-59842.txt

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-support/libssh/libssh_0.11.5.bb | 1 +
 1 file changed, 1 insertion(+)

diff mbox series

Patch

diff --git a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
index 752bded528..5cc270477e 100644
--- a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
+++ b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
@@ -58,3 +58,4 @@  CVE_STATUS[CVE-2026-59847] = "fixed-version: fixed in v0.11.5"
 CVE_STATUS[CVE-2026-59848] = "fixed-version: fixed in v0.11.5"
 CVE_STATUS[CVE-2026-59849] = "fixed-version: fixed in v0.11.5"
 CVE_STATUS[CVE-2026-59850] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2025-59842] = "cpe-incorrect: the current version (0.11.5) is not affected"