Debian/rust-russh: medium 5.3
Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEX_ECDH_REPLY containing a server ephemeral value that is not 32
Action: Upgrade rust-russh to 0.64.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.1-1 | - |
Fixed versions
| 0.64.1-1 |
Sources
published · modified · JSON