fixed GHSA-vgvv-x7xg-6cqg - SSH OOM DoS through malicious packet length

warp-tech · Aug 14, 2024 · fe924f3 · fe924f3
1 parent c43f4b5
commit fe924f3
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/warpgate-admin/Cargo.toml b/warpgate-admin/Cargo.toml
@@ -24,7 +24,7 @@ poem-openapi = { version = "2.0", features = [
     "uuid",
     "static-files",
 ] }
-russh = { version = "0.44.0", features = ["legacy-ed25519-pkcs8-parser"] }
+russh = { version = "0.44.1", features = ["legacy-ed25519-pkcs8-parser"] }
 rust-embed = "8.3"
 sea-orm = { version = "0.12.2", features = [
     "runtime-tokio-rustls",

diff --git a/warpgate-protocol-ssh/Cargo.toml b/warpgate-protocol-ssh/Cargo.toml
@@ -14,7 +14,7 @@ dialoguer = "0.10"
 curve25519-dalek = "4.0.0" # pin due to build fail on x86
 ed25519-dalek = "2.0.0" # pin due to build fail on x86 in 2.1
 futures = "0.3"
-russh = { version = "0.44.0", features = ["legacy-ed25519-pkcs8-parser"] }
+russh = { version = "0.44.1", features = ["legacy-ed25519-pkcs8-parser"] }
 # russh = { version = "0.35.0-beta.6", path = "../../russh/russh"}
 sea-orm = { version = "0.12.2", features = [
     "runtime-tokio-rustls",