git: 26d1ee8df82d - main - security/libssh2: Fix CVE-2026-7598

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Daniel Engberg <diizzy_at_FreeBSD.org>
Date: Fri, 26 Jun 2026 02:41:08 UTC
The branch main has been updated by diizzy:

URL: https://cgit.FreeBSD.org/ports/commit/?id=26d1ee8df82d589fb233b27ce1e9c66de999b60d

commit 26d1ee8df82d589fb233b27ce1e9c66de999b60d
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2026-06-26 01:20:42 +0000
Commit:     Daniel Engberg <diizzy@FreeBSD.org>
CommitDate: 2026-06-26 02:41:01 +0000

    security/libssh2: Fix CVE-2026-7598
    
    Backport upstream commit 256d04b60d80bf1190e96b0ad1e91b2174d744b1
    to fix CVE-2026-7598
    
    Reference:
    https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1
    
    PR:             295742
    Approved by:    Maintainer timeout, 2+ weeks
---
 security/libssh2/Makefile | 4 +++-
 security/libssh2/distinfo | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/security/libssh2/Makefile b/security/libssh2/Makefile
index d764aa3829c2..db81eff0884f 100644
--- a/security/libssh2/Makefile
+++ b/security/libssh2/Makefile
@@ -1,5 +1,6 @@
 PORTNAME=	libssh2
 DISTVERSION=	1.11.1
+PORTVERSION=	1
 PORTEPOCH=	3
 CATEGORIES=	security devel
 MASTER_SITES=	https://github.com/${PORTNAME}/${PORTNAME}/releases/download/${PORTNAME}-${DISTVERSION}/ \
@@ -7,7 +8,8 @@ MASTER_SITES=	https://github.com/${PORTNAME}/${PORTNAME}/releases/download/${POR
 
 PATCH_SITES=	https://github.com/libssh2/libssh2/commit/
 PATCHFILES=	5d03b4f94ac6740e0085a6acda6fc417ca6ecc83.patch:-p1 \
-		d4e43c7b69d10b6cfaaa53787addfd4beac7a3ce.patch:-p1
+		d4e43c7b69d10b6cfaaa53787addfd4beac7a3ce.patch:-p1 \
+		256d04b60d80bf1190e96b0ad1e91b2174d744b1.patch:-p1
 
 MAINTAINER=	sbz@FreeBSD.org
 COMMENT=	Library implementing the SSH2 protocol
diff --git a/security/libssh2/distinfo b/security/libssh2/distinfo
index 172373e7606f..ca1dbd84ab83 100644
--- a/security/libssh2/distinfo
+++ b/security/libssh2/distinfo
@@ -1,7 +1,9 @@
-TIMESTAMP = 1730400101
+TIMESTAMP = 1780210679
 SHA256 (libssh2-1.11.1.tar.xz) = 9954cb54c4f548198a7cbebad248bdc87dd64bd26185708a294b2b50771e3769
 SIZE (libssh2-1.11.1.tar.xz) = 721700
 SHA256 (5d03b4f94ac6740e0085a6acda6fc417ca6ecc83.patch) = 8bf8dd96324f5e934cba3f850a70887f769dcef255f93f13b30f354c1c5e009f
 SIZE (5d03b4f94ac6740e0085a6acda6fc417ca6ecc83.patch) = 3073
 SHA256 (d4e43c7b69d10b6cfaaa53787addfd4beac7a3ce.patch) = c9feb7d3d8c2b1619cb7bf2be2aa86830bf9f27b0ba470a192d33e510a23b3f3
 SIZE (d4e43c7b69d10b6cfaaa53787addfd4beac7a3ce.patch) = 2684
+SHA256 (256d04b60d80bf1190e96b0ad1e91b2174d744b1.patch) = fd4775228fe04a11532043355099fe2643993aae4fb63576620b1941f9a80645
+SIZE (256d04b60d80bf1190e96b0ad1e91b2174d744b1.patch) = 2151