[Bug 1234513] VUL-0: : traefik: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

https://bugzilla.suse.com/show_bug.cgi?id=1234513 https://bugzilla.suse.com/show_bug.cgi?id=1234513#c1 --- Comment #1 from Gianluca Gabrielli <gianluca.gabrielli@suse.com> --- The packages below are or contain embedded packages that are vulnerable to . Tracking as affected: - openSUSE:Factory/traefik contains embedded package: golang.org/x/crypto/ssh (0.28.0) Please consider version bumping or patching the affected dependencies. The listed codestreams are affected. All other codestreams should not be affected, but feel free to double-check. This is a auto-generated message, please reach out to the reporter directly if you think this is incorrect. -- You are receiving this mail because: You are on the CC list for the bug.