From 69f5a41b458b29367a65fe469c2b0255b5db210a Mon Sep 17 00:00:00 2001 From: Ron Frederick Date: Mon, 18 Dec 2023 07:46:28 -0800 Subject: [PATCH] Bump version number up to 2.14.2 and update change log --- asyncssh/version.py | 2 +- docs/changes.rst | 19 +++++++++++++++++++ 2 files changed, 20 insertions(+), 1 deletion(-) diff --git a/asyncssh/version.py b/asyncssh/version.py index cb283dd..5fae86e 100644 --- a/asyncssh/version.py +++ b/asyncssh/version.py @@ -26,4 +26,4 @@ __url__ = 'http://asyncssh.timeheart.net' -__version__ = '2.14.1' +__version__ = '2.14.2' diff --git a/docs/changes.rst b/docs/changes.rst index fbcb2fc..5d0a402 100644 --- a/docs/changes.rst +++ b/docs/changes.rst @@ -3,6 +3,25 @@ Change Log ========== +Release 2.14.2 (18 Dec 2023) +---------------------------- + +* Implemented "strict kex" support and other countermeasures to + protect against the Terrapin Attack described in `CVE-2023-48795 + `. Thanks once + again go to Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk for + identifying and reporting this vulnerability and providing detailed + analysis and suggestions about proposed fixes. + +* Fixed config parser to properly an optional equals delimiter in all + config arguments. Thanks go to Fawaz Orabi for reporting this issue. + +* Fixed TCP send error handling to avoid race condition when receiving + incoming disconnect message. + +* Improved type signature in SSHConnection async context manager. Thanks + go to Pieter-Jan Briers for providing this. + Release 2.14.1 (8 Nov 2023) ---------------------------