[Bug 1234561] VUL-0: CVE-2024-45337: gvisor-tap-vsock: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

https://bugzilla.suse.com/show_bug.cgi?id=1234561 https://bugzilla.suse.com/show_bug.cgi?id=1234561#c2 --- Comment #2 from Danish Prakash <danish.prakash@suse.com> --- The affected function `PublicKeyCallback` is not used by gvisor-tap-vsock and is only part of the vendored source for golang.org/x/crypto. We should be able to close this bug. -- You are receiving this mail because: You are on the CC list for the bug.