Skip to content

v0.62.5

Latest

Choose a tag to compare

@github-actions github-actions released this 31 Jul 20:15

Security fixes

GHSA-m65r-rprj-r5rg - Handler channel callbacks called for non-existing channel - 7c5659f

Russh server did not validate channel IDs passed by a client, so if a client constructed a channel message with an invalid ID, the server-side Handler callback would still get called with that non-existing ID. The consequence of this depend on the specific user implementation.

Fixes

  • de96ad1: fixed #725 - add backpressure to Channel::data() (Eugene)

Full Changelog: v0.62.4...v0.62.5