diff mbox series

[meta-oe,blacksail,26/43] libssh: mark CVEs patched

Message ID	20261012211009.3352822-26-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.216.46, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][blacksail][PATCH 26/43] libssh: mark CVEs patched Date: Tue, 13 Oct 2026 10:09:50 +1300 Message-ID: <20261012211009.3352822-26-ankur.tyagi85@gmail.com> In-Reply-To: <20261012211009.3352822-1-ankur.tyagi85@gmail.com> References: <20261012211009.3352822-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,blacksail,1/43] capnproto: ignore CVE-2026-59704 \| expand [meta-oe,blacksail,1/43] capnproto: ignore CVE-2026-59704 [meta-networking,blacksail,2/43] civetweb: ignore CVE-2026-5789 [meta-networking,blacksail,3/43] dovecot: ignore already fixed CVEs [meta-oe,blacksail,4/43] eject: ignore CVE-2026-28065 [meta-oe,blacksail,5/43] gpsd: patch CVE-2026-58459 [meta-oe,blacksail,6/43] bcc: correct CVE_PRODUCT mapping [meta-oe,blacksail,7/43] dool: patch CVE-2026-56651 [meta-oe,blacksail,8/43] dool: patch CVE-2026-56652 [meta-oe,blacksail,9/43] haveged: ignore CVE-2026-41054 [meta-oe,blacksail,10/43] gpm: ignore CVE-2025-4558 [meta-multimedia,blacksail,11/43] gerbera: ignore CVE-2025-23386 [meta-multimedia,blacksail,12/43] libde265: patch CVE-2026-49295 [meta-multimedia,blacksail,13/43] libde265: patch CVE-2026-49337 [meta-multimedia,blacksail,14/43] libde265: patch CVE-2026-49346 [meta-multimedia,blacksail,15/43] libde265: patch CVE-2026-54240 and CVE-2026-54241 [meta-oe,blacksail,16/43] hdf5: patch CVE-2026-17572 [meta-oe,blacksail,17/43] hdf5: patch CVE-2026-17573 [meta-oe,blacksail,18/43] hdf5: patch CVE-2026-17574 [meta-oe,blacksail,19/43] hdf5: patch CVE-2026-19025 [meta-oe,blacksail,20/43] iniparser: mark CVE-2025-0633 pached [meta-oe,blacksail,21/43] jq: ignore already fixed CVEs [meta-networking,blacksail,22/43] libiec61850: mark CVE-2024-45969 patched [meta-oe,blacksail,23/43] libnfs: patch CVE-2026-53689 [meta-oe,blacksail,24/43] libnfs: patch CVE-2026-57918 [meta-oe,blacksail,25/43] libssh: ignore CVE-2025-14821 [meta-oe,blacksail,26/43] libssh: mark CVEs patched [meta-oe,blacksail,27/43] libssh: ignore CVE-2026-59851 [meta-networking,blacksail,28/43] miniupnpd: patch CVE-2026-107159 [meta-oe,blacksail,29/43] libyang: patch CVE-2026-41401 [meta-networking,blacksail,30/43] tinyproxy: patch CVE-2026-31842 [meta-networking,blacksail,31/43] tinyproxy: patch CVE-2026-54387 [meta-networking,blacksail,32/43] tinyproxy: patch CVE-2026-55202 [meta-networking,blacksail,33/43] wolfssl: mark CVEs patched [meta-python,blacksail,34/43] python3-gunicorn: mark CVE-2024-1135 patched [meta-networking,blacksail,35/43] pgpool2: upgrade 4.7.2 -> 4.7.3 [meta-oe,blacksail,36/43] smarty: upgrade 5.8.4 -> 5.8.5 [meta-python,blacksail,37/43] python3-astroid: upgrade 4.3.2 -> 4.3.3 [meta-python,blacksail,38/43] python3-django: upgrade 6.0.8 -> 6.0.9 [meta-python,blacksail,39/43] python3-django: upgrade 5.2.17 -> 5.2.18 [meta-python,blacksail,40/43] python3-tzdata: upgrade 2026.4 -> 2026.5 [meta-python,blacksail,41/43] python3-werkzeug: upgrade 3.1.8 -> 3.1.9 [meta-python,blacksail,42/43] python3-zeroconf: upgrade 0.151.3 -> 0.151.5 [meta-webserver,blacksail,43/43] swagger-ui: upgrade 5.33.0 -> 5.33.1

Commit Message

Ankur Tyagi Oct. 12, 2026, 9:09 p.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog[1] also confirms the fix.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-59843
https://nvd.nist.gov/vuln/detail/cve-2026-59844
https://nvd.nist.gov/vuln/detail/cve-2026-59845
https://nvd.nist.gov/vuln/detail/cve-2026-59846
https://nvd.nist.gov/vuln/detail/cve-2026-59848
https://nvd.nist.gov/vuln/detail/cve-2026-59850

[1]https://gitlab.com/libssh/libssh-mirror/-/blob/libssh-0.11.5/CHANGELOG?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-support/libssh/libssh_0.11.5.bb | 6 ++++++
 1 file changed, 6 insertions(+)

diff mbox series

Patch

diff --git a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
index 738f8b1731..a99c4ee788 100644
--- a/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
+++ b/meta-oe/recipes-support/libssh/libssh_0.11.5.bb
@@ -50,3 +50,9 @@  do_install_ptest () {
 BBCLASSEXTEND = "native nativesdk"
 
 CVE_STATUS[CVE-2025-14821] = "not-applicable-platform: issue only applies on Windows"
+CVE_STATUS[CVE-2026-59843] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59844] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59845] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59846] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59848] = "fixed-version: fixed in v0.11.5"
+CVE_STATUS[CVE-2026-59850] = "fixed-version: fixed in v0.11.5"