Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Jul 2018 15:37:09 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 230151] security/asyncssh: Update 1.12.0 => 1.13.3
Message-ID:  <bug-230151-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230151

            Bug ID: 230151
           Summary: security/asyncssh: Update 1.12.0 =3D> 1.13.3
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: ndowens.fbsd@yandex.com

Created attachment 195595
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D195595&action=
=3Dedit
Update

In 1.12.1 and important CVE fix was added CVE-2018-7749, where a modified S=
SH
client could request that an AsyncSSH server perform operations before
authentication had completed

https://github.com/ronf/asyncssh/blob/master/docs/changes.rst : Release Not=
es

For this version 1.13.3:

Added support for setting the Unicode error handling strategy in conjunction
with setting an encoding when creating new SSH sessions, streams, and
processes. This strategy can also be set when specifying a session encoding=
 in
create_server(), and when providing an encoding in the get_comment() and
set_comment() functions on private/public keys and certificates.
    Changed handling of Unicode in channels to use incrmeental codec, simil=
ar
to what was previously done in process redirection.
    Added Python 3.7 to the list of classifiers in setup.py, now that it has
been released.
    Updated Travis CI configuration to add Python 3.7 builds, and moved Lin=
ux
builds on never versions of Python up to xenial.
    Added missing coroutine decorator in test_channel.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-230151-7788>