crablover
Re:OpenSSH Pre-Auth Double Free – CVE-2023-25136 – Writeup and Proof-o...
on Wednesday February 08, 2023 @02:01PM (#34712981)
Fortunately not much real-world impact on this one, but it's a stark lesson in what happens when you insist on writing your codebase in C.
The time is ripe for a Rust rewrite. If the Linux kernel can make a start on this, with all its complexity, OpenSSH developers should seriously consider it too.