anchor.diff:    # Please ensure that openssh_with_kerberos still builds when
     # bumping the version here!
     name = "openssh-${version}";
  -  version = "7.5p1";
  +  version = if hpnSupport then "7.5p1" else "7.6p1";
   
     src = if hpnSupport then
         fetchurl {
  
positive.code:       # See discussion in https://github.com/NixOS/nixpkgs/pull/16966
        ./dont_create_privsep_path.patch
      ]
      ++ optional withGssapiPatches gssapiSrc;
  
    postPatch =
      # On Hydra this makes installation fail (sometimes?),
  
negative.code: let
  
    # **please** update this patch when you update to a new openssh release.
    gssapiPatch = fetchpatch {
      name = "openssh-gssapi.patch";
      url = "https://anonscm.debian.org/cgit/pkg-ssh/openssh.git/plain/debian"
          + "/patches/gssapi.patch?id=1e0d55f9163793742d20eaadd4784db16fd3459d";
      sha256 = "130phj87q87p9crigd6852nnaqsqkfg09h45a32lk4524h9kkxgb";
    };
  
  in
  