15
0

- update to 2.14.2 (bsc#1218165, CVE-2023-48795):

* Implemented "strict kex" support and other countermeasures to
  * protect against the Terrapin Attack described in
    CVE-2023-48795
  * Fixed config parser to properly an optional equals delimiter
    in all config arguments.
  * Fixed TCP send error handling to avoid race condition when
    receiving incoming disconnect message.
  * Improved type signature in SSHConnection async context
    manager.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asyncssh?expand=0&rev=54
This commit is contained in:
2023-12-18 16:06:52 +00:00
committed by Git OBS Bridge
parent 2b3137a9fe
commit bf500cd6e2
4 changed files with 19 additions and 6 deletions

View File

@@ -1,3 +1,17 @@
-------------------------------------------------------------------
Mon Dec 18 15:55:18 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 2.14.2 (bsc#1218165, CVE-2023-48795):
* Implemented "strict kex" support and other countermeasures to
* protect against the Terrapin Attack described in
CVE-2023-48795
* Fixed config parser to properly an optional equals delimiter
in all config arguments.
* Fixed TCP send error handling to avoid race condition when
receiving incoming disconnect message.
* Improved type signature in SSHConnection async context
manager.
-------------------------------------------------------------------
Fri Nov 10 12:34:04 UTC 2023 - Dirk Müller <dmueller@suse.com>