Overview

Request 1124972 accepted

- update to 2.14.1 (bsc#1217028, CVE-2023-46445):
* Hardened AsyncSSH state machine against potential message
injection attacks, described in more detail in
`CVE-2023-46445 and CVE-2023-46446
* Added support for passing in a regex in readuntil in
SSHReader,
* Added support for get_addresses() and get_port() methods on
* SSHAcceptor.
* Fixed an issue with AsyncFileWriter potentially writing data
* out of order.
* Updated testing to include Python 3.12.
* Updated readthedocs integration to use YAML config file.

Request History
Dirk Mueller's avatar

dirkmueller created request

- update to 2.14.1 (bsc#1217028, CVE-2023-46445):
* Hardened AsyncSSH state machine against potential message
injection attacks, described in more detail in
`CVE-2023-46445 and CVE-2023-46446
* Added support for passing in a regex in readuntil in
SSHReader,
* Added support for get_addresses() and get_port() methods on
* SSHAcceptor.
* Fixed an issue with AsyncFileWriter potentially writing data
* out of order.
* Updated testing to include Python 3.12.
* Updated readthedocs integration to use YAML config file.


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Saul Goodman's avatar

licensedigger accepted review

ok


Ana Guerrero's avatar

anag+factory added openSUSE:Factory:Staging:adi:2 as a reviewer

Being evaluated by staging project "openSUSE:Factory:Staging:adi:2"


Ana Guerrero's avatar

anag+factory accepted review

Picked "openSUSE:Factory:Staging:adi:2"


Dominique Leuenberger's avatar

dimstar accepted review


Ana Guerrero's avatar

anag+factory accepted review

Staging Project openSUSE:Factory:Staging:adi:2 got accepted.


Ana Guerrero's avatar

anag+factory approved review

Staging Project openSUSE:Factory:Staging:adi:2 got accepted.


Ana Guerrero's avatar

anag+factory accepted request

Staging Project openSUSE:Factory:Staging:adi:2 got accepted.

openSUSE Build Service is sponsored by