Add a security patch to libssh2 to guard it against the Terrapin attack.

general/genlib/libssh2.xml

@@ -66,17 +66,16 @@
       </listitem>
     </itemizedlist>
 
-<!--
+
     <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
       <listitem>
         <para>
           Required patch:
-          <ulink url="&patch-root;/libssh2-&libssh2-version;-upstream_fix-1.patch"/>
+          <ulink url="&patch-root;/libssh2-&libssh2-version;-security_fixes-1.patch"/>
         </para>
       </listitem>
     </itemizedlist>
--->
 
     <bridgehead renderas="sect3">libssh2 Dependencies</bridgehead>
 
@@ -94,6 +93,13 @@
   <sect2 role="installation">
     <title>Installation of libssh2</title>
 
+    <para>
+      <!-- the Terrapin attack -->
+      First, fix a critical security vulnerability in libssh2:
+    </para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../libssh2-&libssh2-version;-security_fixes-1.patch</userinput></screen>
+
     <para>
       If you want to test the package, exclude the tests requiring a static
       library:

introduction/welcome/changelog.xml

@@ -41,6 +41,11 @@
     <listitem>
       <para>December 26th, 2023</para>
       <itemizedlist>
+        <listitem>
+          <para>[renodr] - Add a security patch to libssh2 to guard it against
+          the Terrapin attack. Fixes
+          <ulink url="&blfs-ticket-root;19023">#19023</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[renodr] - Update to openssh-9.6p1 (Security Update). Fixes
           <ulink url="&blfs-ticket-root;19023">#19023</ulink>.</para>