[Bug 1234506] VUL-0: CVE-2024-45337: tailscale: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

https://bugzilla.suse.com/show_bug.cgi?id=1234506 https://bugzilla.suse.com/show_bug.cgi?id=1234506#c4 Alexandre Vicenzi <alexandre.vicenzi@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|alexandre.vicenzi@suse.com |security-team@suse.de --- Comment #4 from Alexandre Vicenzi <alexandre.vicenzi@suse.com> --- Richard backported the patch to Factory, see https://build.opensuse.org/request/show/1231944. This is now fixed. -- You are receiving this mail because: You are on the CC list for the bug.