[blfs] branch trunk updated: libssh2: Fixed CVE-2026-55200, CVE-2025-15661, and CVE-2026-55199.

This is an automated email from the git hooks/post-receive script.

git pushed a commit to branch trunk
in repository blfs.

The following commit(s) were added to refs/heads/trunk by this push:
     new 959deed264 libssh2: Fixed CVE-2026-55200, CVE-2025-15661, and CVE-2026-55199.
959deed264 is described below

commit 959deed2648e90271e2680360d19a3301842eaf5
Author: Douglas R. Reno <[email protected]>
AuthorDate: Wed Jun 24 15:41:13 2026 -0500

    libssh2: Fixed CVE-2026-55200, CVE-2025-15661, and CVE-2026-55199.
---
 general/genlib/libssh2.xml         | 19 +++----------------
 introduction/welcome/changelog.xml | 11 +++++++++++
 2 files changed, 14 insertions(+), 16 deletions(-)

diff --git a/general/genlib/libssh2.xml b/general/genlib/libssh2.xml
index 3d4bc9a0eb..c3fac2c6a4 100644
--- a/general/genlib/libssh2.xml
+++ b/general/genlib/libssh2.xml
@@ -66,7 +66,6 @@
       </listitem>
     </itemizedlist>
 
-<!--
     <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
       <listitem>
@@ -76,7 +75,7 @@
         </para>
       </listitem>
     </itemizedlist>
--->
+
     <bridgehead renderas="sect3">libssh2 Dependencies</bridgehead>
 
     <bridgehead renderas="sect4">Optional</bridgehead>
@@ -92,25 +91,13 @@
 
   <sect2 role="installation">
     <title>Installation of libssh2</title>
-<!--
+
     <para>
-      <!- - the Terrapin attack - ->
-      First, fix a critical security vulnerability in libssh2:
+      First, fix three security vulnerabilities in libssh2:
     </para>
 
 <screen><userinput remap="pre">patch -Np1 -i ../libssh2-&libssh2-version;-security_fixes-1.patch</userinput></screen>
 
-    <para>
-      If you want to test the package, exclude the tests requiring a static
-      library, and remove the reference to an insecure algorithm removed
-      since OpenSSH 9.8:
-    </para>
-
-<screen><userinput>sed -E '/^DOCKER_TEST/,/^SSHD_TEST/s/test_(auth_keyboard_info.* |hostkey |simple)/$(NOTHING)/' \
-    -i tests/Makefile.inc &amp;&amp;
-autoreconf -fi &amp;&amp;
-sed 's/ssh-dss,//' -i tests/openssh_server/sshd_config</userinput></screen>
--->
     <para>
       Install <application>libssh2</application> by running the following
       commands:
diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 45b38dc931..305472bf18 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -39,6 +39,17 @@
   <itemizedlist>
     <title>Changelog Entries:</title>
 
+    <listitem>
+      <para>June 24th, 2026</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Fix CVE-2026-55200, CVE-2025-15661, and
+          CVE-2026-55199 in libssh2 (Security Update). Fixes
+          <ulink url="&blfs-ticket-root;23485">#23485</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>June 23rd, 2026</para>
       <itemizedlist>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page