warp-tech/warpgate
1
1
Fork 0
mirror of https://github.com/warp-tech/warpgate.git synced 2024-09-20 06:46:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

fixed GHSA-vgvv-x7xg-6cqg - SSH OOM DoS through malicious packet length

Browse source
This commit is contained in:
Eugene 2024-08-14 22:59:23 +02:00
parent c43f4b5fca
commit fe924f31ce
No known key found for this signature in database
GPG key ID: 5896FCBBDD1CF4F4
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Cargo.lock generated
View file

@ -3729,9 +3729,9 @@ dependencies = [
[[package]]
name = "russh"
version = "0.44.0"
version = "0.44.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "69d007dc79831fd2bbe5a388daa13fa48c5d2c6f6ceb74a08b13fb1450c3468a"
checksum = "6500eedfaf8cd81597899d896908a4b9cd5cb566db875e843c04ccf92add2c16"
dependencies = [
"aes",
"aes-gcm",

2
warpgate-admin/Cargo.toml
View file

@ -24,7 +24,7 @@ poem-openapi = { version = "2.0", features = [
"uuid",
"static-files",
] }
russh = { version = "0.44.0", features = ["legacy-ed25519-pkcs8-parser"] }
russh = { version = "0.44.1", features = ["legacy-ed25519-pkcs8-parser"] }
rust-embed = "8.3"
sea-orm = { version = "0.12.2", features = [
"runtime-tokio-rustls",

2
warpgate-protocol-ssh/Cargo.toml
View file

@ -14,7 +14,7 @@ dialoguer = "0.10"
curve25519-dalek = "4.0.0" # pin due to build fail on x86
ed25519-dalek = "2.0.0" # pin due to build fail on x86 in 2.1
futures = "0.3"
russh = { version = "0.44.0", features = ["legacy-ed25519-pkcs8-parser"] }
russh = { version = "0.44.1", features = ["legacy-ed25519-pkcs8-parser"] }
# russh = { version = "0.35.0-beta.6", path = "../../russh/russh"}
sea-orm = { version = "0.12.2", features = [
"runtime-tokio-rustls",