Comment # 1 on bug 1234518 from Gianluca Gabrielli
The packages below are or contain embedded packages that are vulnerable to .

Tracking as affected:
- openSUSE:Backports:SLE-15-SP6/osv-scanner contains embedded package:
golang.org/x/crypto/ssh (0.13.0)
- openSUSE:Backports:SLE-15-SP6:Update/osv-scanner contains embedded package:
golang.org/x/crypto/ssh (0.13.0)
- openSUSE:Factory/osv-scanner contains embedded package:
golang.org/x/crypto/ssh (0.28.0)

Please consider version bumping or patching the affected dependencies.
The listed codestreams are affected. All other codestreams should not be
affected, but feel free to double-check.
This is a auto-generated message, please reach out to the reporter directly if
you think this is incorrect.
No bug-owner found for these packages, if the assignation is not correct feel
free to re-assign.


You are receiving this mail because: