mirror of
https://git.yoctoproject.org/poky
synced 2026-09-24 22:36:21 +02:00
Backport the upstream fix for CVE-2026-58051 using the
commit in [1].
The CVE advisory [2] describes an uninitialized
publickey-list entry cleanup issue affecting libssh2
through 1.11.1.
[1] a9758da45a
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-58051
(From OE-Core rev: 19c481ffd3824512eb85845f04ae7b08b947b4f6)
Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>