anchor.diff:      else
         fetchurl {
           url = "mirror://openbsd/OpenSSH/portable/${pname}-${version}.tar.gz";
  -        sha256 = "1b8sy6v0b8v4ggmknwcqx3y1rjcpsll0f1f8f4vyv11x4ni3njvb";
  +        sha256 = "1zwk3g57gb13br206k6jdhgnp6y1nibwswzraqspbl1m73pxpx82";
         };
   
     patches =
  
positive.code:       # See discussion in https://github.com/NixOS/nixpkgs/pull/16966
        ./dont_create_privsep_path.patch
  
        # CVE-2018-20685, can probably be dropped with next version bump
        # See https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
        # for details
  
negative.code:         url = https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2.patch;
          sha256 = "0q27i9ymr97yb628y44qi4m11hk5qikb1ji1vhvax8hp18lwskds";
        })
      ++ optional withGssapiPatches (assert withKerberos; gssapiPatch);
  
    postPatch =
  