From 2b1011d4a3797d7e0f6f29afa1786d3cf2464019 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Janne=20He=C3=9F?= <janne@hess.ooo>
Date: Thu, 11 Mar 2021 11:57:14 +0100
Subject: [PATCH] openssh_hpn/openssh_gssapi: Add CVE-2021-28041

---
 pkgs/tools/networking/openssh/common.nix  | 3 ++-
 pkgs/tools/networking/openssh/default.nix | 8 ++++++++
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/pkgs/tools/networking/openssh/common.nix b/pkgs/tools/networking/openssh/common.nix
index 9d4aaad25cd3..0fefcc259fbf 100644
--- a/pkgs/tools/networking/openssh/common.nix
+++ b/pkgs/tools/networking/openssh/common.nix
@@ -4,6 +4,7 @@
 , src
 , extraPatches ? []
 , extraNativeBuildInputs ? []
+, extraMeta ? {}
 }:
 
 { lib, stdenv
@@ -111,5 +112,5 @@ stdenv.mkDerivation rec {
     license = licenses.bsd2;
     platforms = platforms.unix ++ platforms.windows;
     maintainers = with maintainers; [ eelco aneeshusa ];
-  };
+  } // extraMeta;
 }
diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix
index 67082b15bc5c..3ea35daaeb3d 100644
--- a/pkgs/tools/networking/openssh/default.nix
+++ b/pkgs/tools/networking/openssh/default.nix
@@ -33,6 +33,10 @@ in {
     ];
 
     extraNativeBuildInputs = [ autoreconfHook ];
+
+    extraMeta.knownVulnerabilities = [
+      "CVE-2021-28041"
+    ];
   };
 
   openssh_gssapi = common rec {
@@ -59,5 +63,9 @@ in {
     ];
 
     extraNativeBuildInputs = [ autoreconfHook ];
+
+    extraMeta.knownVulnerabilities = [
+      "CVE-2021-28041"
+    ];
   };
 }