From 3a8d897de5e2265a6d92dea3fdf4209e1dcdffc1 Mon Sep 17 00:00:00 2001
From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Fri, 7 Aug 2026 15:40:07 +0000
Subject: [PATCH] Use included libssh2 for Nmap on macOS

---
 macosx/openssl.modules | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/macosx/openssl.modules b/macosx/openssl.modules
index e79742b81..9880ef079 100644
--- a/macosx/openssl.modules
+++ b/macosx/openssl.modules
@@ -23,7 +23,7 @@
         </dependencies>
     </cmake>
     <cmake id="libssh2">
-        <branch repo="libssh2-org" version="&libpcap_version;" module="libssh2-&libssh2_version;.tar.xz"/>
+        <branch repo="libssh2-org" version="&libssh2_version;" module="libssh2-&libssh2_version;.tar.xz"/>
         <dependencies>
             <dep package="openssl" />
             <dep package="zlib" />
@@ -40,8 +40,10 @@
         <branch repo="openssl" version="&openssl_version;" module="openssl-&openssl_version;.tar.gz"/>
     </autotools>
 
+<!-- Remove "--with-libssh2=included" when libssh2 upstream releases a version greater than 1.11.1 to address CVEs we patched in our copy. -->
     <autotools id="nmap" supports-non-srcdir-builds="no"
        autogen-sh="configure" autogenargs="--with-libdnet=included --with-liblua=included
+--with-libssh2=included
 --without-zenmap --without-ncat --without-ndiff --without-nping"
     >
         <branch repo="nmap-local" module="nmap-&nmap_version;.tar.gz" version="&nmap_version;"/>