From 2e838bbdbdffcf299d1631fd0423e3ed3e7f1a55fd7884aef55b48c37a3f34d1 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Fri, 10 Nov 2023 12:36:55 +0000 Subject: [PATCH] - update to 2.14.1: * Hardened AsyncSSH state machine against potential message injection attacks, described in more detail in `CVE-2023-46445 and CVE-2023-46446 * Added support for passing in a regex in readuntil in SSHReader, * Added support for get_addresses() and get_port() methods on * SSHAcceptor. * Fixed an issue with AsyncFileWriter potentially writing data * out of order. * Updated testing to include Python 3.12. * Updated readthedocs integration to use YAML config file. OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asyncssh?expand=0&rev=51 --- asyncssh-2.14.0.tar.gz | 3 --- asyncssh-2.14.1.tar.gz | 3 +++ python-asyncssh.changes | 16 ++++++++++++++++ python-asyncssh.spec | 2 +- 4 files changed, 20 insertions(+), 4 deletions(-) delete mode 100644 asyncssh-2.14.0.tar.gz create mode 100644 asyncssh-2.14.1.tar.gz diff --git a/asyncssh-2.14.0.tar.gz b/asyncssh-2.14.0.tar.gz deleted file mode 100644 index e27cf33..0000000 --- a/asyncssh-2.14.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e03ef2d131fbb4371b4018718452ce8c735a48edfe0139d2abdce4c187a459c3 -size 501088 diff --git a/asyncssh-2.14.1.tar.gz b/asyncssh-2.14.1.tar.gz new file mode 100644 index 0000000..e42a990 --- /dev/null +++ b/asyncssh-2.14.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1ac31c333a0d83c88831523245500caa814503423741b0e465339ef6da5b5e29 +size 497303 diff --git a/python-asyncssh.changes b/python-asyncssh.changes index 8b960b5..75cf28d 100644 --- a/python-asyncssh.changes +++ b/python-asyncssh.changes @@ -1,3 +1,19 @@ +------------------------------------------------------------------- +Fri Nov 10 12:34:04 UTC 2023 - Dirk Müller + +- update to 2.14.1: + * Hardened AsyncSSH state machine against potential message + injection attacks, described in more detail in + `CVE-2023-46445 and CVE-2023-46446 + * Added support for passing in a regex in readuntil in + SSHReader, + * Added support for get_addresses() and get_port() methods on + * SSHAcceptor. + * Fixed an issue with AsyncFileWriter potentially writing data + * out of order. + * Updated testing to include Python 3.12. + * Updated readthedocs integration to use YAML config file. + ------------------------------------------------------------------- Thu Oct 5 09:42:35 UTC 2023 - Dirk Müller diff --git a/python-asyncssh.spec b/python-asyncssh.spec index c7f361e..94bd08c 100644 --- a/python-asyncssh.spec +++ b/python-asyncssh.spec @@ -19,7 +19,7 @@ %define skip_python2 1 %define skip_python36 1 Name: python-asyncssh -Version: 2.14.0 +Version: 2.14.1 Release: 0 Summary: Asynchronous SSHv2 client and server library License: EPL-2.0 OR GPL-2.0-or-later