[Bug 1234583] VUL-0: CVE-2024-45337: chezmoi: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

https://bugzilla.suse.com/show_bug.cgi?id=1234583 https://bugzilla.suse.com/show_bug.cgi?id=1234583#c2 Filippo Bonazzi <filippo.bonazzi@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |filippo.bonazzi@suse.com, | |mlin@suse.com Flags| |needinfo?(mlin@suse.com) --- Comment #2 from Filippo Bonazzi <filippo.bonazzi@suse.com> --- Assigning to Max Lin as he submitted chezmoi to Leap 15.x and Leap 16. -- You are receiving this mail because: You are on the CC list for the bug.