Debian/rust-russh: medium 4.3
Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X25519 public key in b
Action: Upgrade rust-russh to 0.64.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.1-1 | - |
Fixed versions
| 0.64.1-1 |
Sources
published · modified · JSON