[Bug 230151] security/asyncssh: Update 1.12.0 => 1.13.3

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Jul 29 15:37:12 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=230151

            Bug ID: 230151
           Summary: security/asyncssh: Update 1.12.0 => 1.13.3
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs at FreeBSD.org
          Reporter: ndowens.fbsd at yandex.com

Created attachment 195595
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=195595&action=edit
Update

In 1.12.1 and important CVE fix was added CVE-2018-7749, where a modified SSH
client could request that an AsyncSSH server perform operations before
authentication had completed

https://github.com/ronf/asyncssh/blob/master/docs/changes.rst : Release Notes

For this version 1.13.3:

Added support for setting the Unicode error handling strategy in conjunction
with setting an encoding when creating new SSH sessions, streams, and
processes. This strategy can also be set when specifying a session encoding in
create_server(), and when providing an encoding in the get_comment() and
set_comment() functions on private/public keys and certificates.
    Changed handling of Unicode in channels to use incrmeental codec, similar
to what was previously done in process redirection.
    Added Python 3.7 to the list of classifiers in setup.py, now that it has
been released.
    Updated Travis CI configuration to add Python 3.7 builds, and moved Linux
builds on never versions of Python up to xenial.
    Added missing coroutine decorator in test_channel.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list