Skip to content

v1.0.20260315-hardened-2

Choose a tag to compare

View all tags
@jegly jegly released this 26 Mar 04:14
· 39 commits to master since this release
v1.0.20260315-hardened-2
ed6f8b0

Security: Patches two vulnerabilities in golang.org/x/crypto that are unpatched in upstream WireGuard Android as of this release:

[CVE] Unbounded memory consumption in golang.org/x/crypto/ssh GSSAPI parsing
[CVE] Out-of-bounds panic in golang.org/x/crypto/ssh/agent on malformed messages

Upgraded golang.org/x/crypto from 0.38.0 to 0.45.0.

Assets 3
Loading