From owner-freebsd-ports-bugs@freebsd.org Sun Jul 29 15:37:11 2018 Return-Path: Delivered-To: freebsd-ports-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BC2921059A24 for ; Sun, 29 Jul 2018 15:37:11 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 48E8C8462A for ; Sun, 29 Jul 2018 15:37:11 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.ysv.freebsd.org (Postfix) id 0AED11059A23; Sun, 29 Jul 2018 15:37:11 +0000 (UTC) Delivered-To: ports-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD31D1059A22 for ; Sun, 29 Jul 2018 15:37:10 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org [IPv6:2001:1900:2254:206a::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.ysv.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7116184629 for ; Sun, 29 Jul 2018 15:37:10 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id BDBBC17124 for ; Sun, 29 Jul 2018 15:37:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w6TFb9xl050632 for ; Sun, 29 Jul 2018 15:37:09 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w6TFb9xa050631 for ports-bugs@FreeBSD.org; Sun, 29 Jul 2018 15:37:09 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 230151] security/asyncssh: Update 1.12.0 => 1.13.3 Date: Sun, 29 Jul 2018 15:37:09 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: ndowens.fbsd@yandex.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ports-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 29 Jul 2018 15:37:12 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230151 Bug ID: 230151 Summary: security/asyncssh: Update 1.12.0 =3D> 1.13.3 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: ports-bugs@FreeBSD.org Reporter: ndowens.fbsd@yandex.com Created attachment 195595 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D195595&action= =3Dedit Update In 1.12.1 and important CVE fix was added CVE-2018-7749, where a modified S= SH client could request that an AsyncSSH server perform operations before authentication had completed https://github.com/ronf/asyncssh/blob/master/docs/changes.rst : Release Not= es For this version 1.13.3: Added support for setting the Unicode error handling strategy in conjunction with setting an encoding when creating new SSH sessions, streams, and processes. This strategy can also be set when specifying a session encoding= in create_server(), and when providing an encoding in the get_comment() and set_comment() functions on private/public keys and certificates. Changed handling of Unicode in channels to use incrmeental codec, simil= ar to what was previously done in process redirection. Added Python 3.7 to the list of classifiers in setup.py, now that it has been released. Updated Travis CI configuration to add Python 3.7 builds, and moved Lin= ux builds on never versions of Python up to xenial. Added missing coroutine decorator in test_channel. --=20 You are receiving this mail because: You are the assignee for the bug.=