-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Apr 2024 16:14:32 +0200 Source: python-asyncssh Architecture: source Version: 2.10.1-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Steve McIntyre <steve.mcintyre@pexip.com> Closes: 1059007 Changes: python-asyncssh (2.10.1-2+deb12u1) bookworm-security; urgency=medium . * Apply and tweak upstream security fix for CVE-2023-48795 Implement "strict kex" support to harden AsyncSSH against Terrapin Attack. Closes: #1059007 Checksums-Sha1: 8e66c0edb5a6bca17c1cc5a0001f86389ba5b75d 2461 python-asyncssh_2.10.1-2+deb12u1.dsc 29c59b8b0e95d37b4de8ab683ffd21b9056ea0f7 479790 python-asyncssh_2.10.1.orig.tar.gz 8d2720fd2edcc387f613e52e5dc75812dfef01fc 12956 python-asyncssh_2.10.1-2+deb12u1.debian.tar.xz cce421a8681b25eef2ad16d606c6a8a6fee47569 8198 python-asyncssh_2.10.1-2+deb12u1_source.buildinfo Checksums-Sha256: 371b4915cbffcf1da74a5f84ed57e6b197b84994cef26520530b4f73e8e2bc41 2461 python-asyncssh_2.10.1-2+deb12u1.dsc 6c58c999806b17d7cf654d995cebb7f2b918d17335ebc11226f5a0c1ea29d12f 479790 python-asyncssh_2.10.1.orig.tar.gz 46db643314fff2aeeab3d246fa1d63d7aa13200f016fb7278e0f6662c72f6052 12956 python-asyncssh_2.10.1-2+deb12u1.debian.tar.xz e10c3cd21a79f8c1b260c41c8a0edc0b4b6aded9035e22e4b85f867ba60b67c6 8198 python-asyncssh_2.10.1-2+deb12u1_source.buildinfo Files: 57b44875eb2cf9a534daa78f6fc3a357 2461 python optional python-asyncssh_2.10.1-2+deb12u1.dsc 1fc8fb88dd5fbfff4ea7710c7caa88e7 479790 python optional python-asyncssh_2.10.1.orig.tar.gz 7cadca266c1b12784e4fb366c22daec6 12956 python optional python-asyncssh_2.10.1-2+deb12u1.debian.tar.xz 750d5836c9861349c1f8c4f19438296e 8198 python optional python-asyncssh_2.10.1-2+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAma/ZxwACgkQEMKTtsN8 Tja2Cw/5Ae6E0Ljp5tgQ/6etFksJv4N8z0N2qQG7bJUnScka7OlqLGht7A4xtZmK R3d3BQfzKFQPXwief1XUWpUqYQ2mBwLqZozEWOvDbxShLmSWk9twQmVrCV9j1fm+ akBidcoFyNEhMNvNSoM4wxmOI/81ed4BdZQEV4Zr5Tge0PmriWkBicUjLw05G63v Krmwn/1lSIWKCX2Ln4sKr3uWlDc47g/W1MF7ADcxlUzutqb/S4EdT1WHCKTXgvCg e3tIxsJf/HwhMAbT8022XLmJT0xp211Rlci6PKx52zzusY7h12C+7XBWVhI1QLcz uLagZlofQAv7F5E5oMD4FKG3xntszVOIYfZ2i8f0uOw3Kx//AWHIFN3mVsM+hoMa /yt8AnK6iwICBq7FhjglffNoluB6OV7Zw8OFM3NtL6CZaGC4qczu8sydlsCR/Xi4 iW0fBTFNlIn7jot7MchBZ2W87Mz32GcBqEsSMW4i3AiQEINhVQG8lplV8crY7z0g DKOn682EteCBBjfENhLHP/UDj2SCNSKhDUZN7bOWLxWMWeOS/fenh5AdmoYGdADD qWmgxdfhNru/dP8zCoP/x5vyiCaXUVQzywYfd0EJ2FGXgKwlbkCuFkOpJ1sMaGZJ GHokG8m+Oe+UOFfYGUrtkp+LnyzfgJYhL4skD2xIJAUcbl0jQKg= =9J4t -----END PGP SIGNATURE-----
