[stable 1.96.0] Patch libssh2-sys#17140
Merged
Merged
Conversation
This imports libssh2-sys 0.3.1 from commit 7fa55ea97e086d69d96267f4a1b84137a5514582 in order to patch a CVE fix.
…LL_PACKET path Backport of upstream commit 97acf3dfda80c91c3a8c9f2372546301d4a1a7a8
…ndler Backport of upstream commit 17626857d20b3c9a1addfa45979dadcee1cd84a4
…n malformed packet Backport of upstream commit 2dae3024897e1898d389835151f4e9606227721d
Collaborator
|
r? @weihanglo rustbot has assigned @weihanglo. Use Why was this reviewer chosen?The reviewer was selected based on:
|
Collaborator
|
weihanglo
approved these changes
Jun 26, 2026
Member
|
The job failure is inherently a problem of Cargo patching. We normally don't want to check the code in patched crates but they are considered "local" so no cap-lints on them. |
Member
Hmm… I was wrong it was not this case. |
weihanglo
added a commit
to weihanglo/cargo
that referenced
this pull request
Jun 30, 2026
Basically rust-lang#17140 but with official libssh2-sys release. See * https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ * https://rust-lang.zulipchat.com/#narrow/channel/241545-t-release/topic/libssh2.20backport.20for.20cargo.20release/with/607458944
This was referenced Jun 30, 2026
epage
pushed a commit
that referenced
this pull request
Jun 30, 2026
Basically #17140 but with official libssh2-sys release. See * https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ * https://rust-lang.zulipchat.com/#narrow/channel/241545-t-release/topic/libssh2.20backport.20for.20cargo.20release/with/607458944
epage
added a commit
that referenced
this pull request
Jun 30, 2026
### What does this PR try to resolve? Basically #17140 but with official libssh2-sys release. See * #17152 * https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ * https://rust-lang.zulipchat.com/#narrow/channel/241545-t-release/topic/libssh2.20backport.20for.20cargo.20release/with/607458944
pull Bot
pushed a commit
to Mu-L/cargo
that referenced
this pull request
Jun 30, 2026
### What does this PR try to resolve? Basically rust-lang#17140 but with official libssh2-sys release. See * https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ * https://rust-lang.zulipchat.com/#narrow/channel/241545-t-release/topic/libssh2.20backport.20for.20cargo.20release/with/607458944
13 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This imports a copy of libssh2-sys 0.9.5 with 3 CVE fixes applied.
This is intended to be temporary until the upstream fixes get merged and a new release is made. See https://rust-lang.zulipchat.com/#narrow/channel/241545-t-release/topic/libssh2.20backport.20for.20cargo.20release/with/606766672