Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 55EFB84E7F for ; Fri, 17 Nov 2023 20:45:35 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id ZaTS1f3cxU_P for ; Fri, 17 Nov 2023 20:45:34 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id B886084E74 for ; Fri, 17 Nov 2023 20:45:34 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id B220EFA3D; Fri, 17 Nov 2023 20:45:34 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1700253934165490" MIME-Version: 1.0 Date: Fri, 17 Nov 2023 20:45:34 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/security/py-asyncssh To: pkgsrc-changes@NetBSD.org Approved: commit_and_comment Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20231117204534.B220EFA3D@cvs.NetBSD.org> This is a multi-part message in MIME format. --_----------=_1700253934165490 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="UTF-8" Module Name: pkgsrc Committed By: adam Date: Fri Nov 17 20:45:34 UTC 2023 Modified Files: pkgsrc/security/py-asyncssh: Makefile distinfo Log Message: py-asyncssh: updated to 2.14.1 Release 2.14.1 (8 Nov 2023) --------------------------- * Hardened AsyncSSH state machine against potential message injection attacks, described in more detail in `CVE-2023-46445 `_ and `CVE-2023-46446 `_. Thanks go to Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk for identifying and reporting these vulnerabilities and providing detailed analysis and suggestions about the proposed fixes. * Added support for passing in a regex in readuntil in SSHReader, contributed by Oded Engel. * Added support for get_addresses() and get_port() methods on SSHAcceptor. Thanks go to Allison Karlitskaya for suggesting this feature. * Fixed an issue with AsyncFileWriter potentially writing data out of order. Thanks go to Chan Chun Wai for reporting this issue and providing code to reproduce it. * Updated testing to include Python 3.12. * Updated readthedocs integration to use YAML config file. To generate a diff of this commit: cvs rdiff -u -r1.38 -r1.39 pkgsrc/security/py-asyncssh/Makefile cvs rdiff -u -r1.37 -r1.38 pkgsrc/security/py-asyncssh/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1700253934165490 Content-Disposition: inline Content-Length: 1623 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/py-asyncssh/Makefile diff -u pkgsrc/security/py-asyncssh/Makefile:1.38 pkgsrc/security/py-asyncssh/Makefile:1.39 --- pkgsrc/security/py-asyncssh/Makefile:1.38 Sun Oct 1 16:11:32 2023 +++ pkgsrc/security/py-asyncssh/Makefile Fri Nov 17 20:45:34 2023 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.38 2023/10/01 16:11:32 adam Exp $ +# $NetBSD: Makefile,v 1.39 2023/11/17 20:45:34 adam Exp $ -DISTNAME= asyncssh-2.14.0 +DISTNAME= asyncssh-2.14.1 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= security python MASTER_SITES= ${MASTER_SITE_PYPI:=a/asyncssh/} Index: pkgsrc/security/py-asyncssh/distinfo diff -u pkgsrc/security/py-asyncssh/distinfo:1.37 pkgsrc/security/py-asyncssh/distinfo:1.38 --- pkgsrc/security/py-asyncssh/distinfo:1.37 Sun Oct 1 16:11:32 2023 +++ pkgsrc/security/py-asyncssh/distinfo Fri Nov 17 20:45:34 2023 @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.37 2023/10/01 16:11:32 adam Exp $ +$NetBSD: distinfo,v 1.38 2023/11/17 20:45:34 adam Exp $ -BLAKE2s (asyncssh-2.14.0.tar.gz) = 2723b495a4983e85b1c095db53c2d1d3182c289d7168f29f4d235b9877d39015 -SHA512 (asyncssh-2.14.0.tar.gz) = d8a9bbd71b9fdfe96012cd6513f086240ef93304f3166d3a7d801a066791f5830727e85c75dc0884501ba0a33e988f031bf6e8cac7faad953a0beb7369959cb5 -Size (asyncssh-2.14.0.tar.gz) = 501088 bytes +BLAKE2s (asyncssh-2.14.1.tar.gz) = 2ceffa254c3a405d55423e0252c3793ce8fd821aa47801c8bae0fcf13135b502 +SHA512 (asyncssh-2.14.1.tar.gz) = b3a96990c730a3cfda83b7f459675279a93d77c962b9765aa3b763a25a83a9fd143dfb3b25944fdbd4c5cded4b9258d82f2b06c1dc4f47445d0bdfa655d91f70 +Size (asyncssh-2.14.1.tar.gz) = 497303 bytes --_----------=_1700253934165490--