[Bug 1234565] VUL-0: CVE-2024-45337: git-bug: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

https://bugzilla.suse.com/show_bug.cgi?id=1234565 https://bugzilla.suse.com/show_bug.cgi?id=1234565#c2 Matej Cepl <mcepl@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #2 from Matej Cepl <mcepl@suse.com> --- Filed https://github.com/git-bug/git-bug/pull/1312 and https://gitlab.com/gitlab-org/api/client-go/-/issues/2077. Waiting on help from upstream. -- You are receiving this mail because: You are on the CC list for the bug.