Debian/rust-russh: medium 6.5
Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTH_IN
Action: Upgrade rust-russh to 0.64.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.1-1 | - |
Fixed versions
| 0.64.1-1 |
Sources
published · modified · JSON