[ubuntu/oracular-proposed] python-asyncssh 2.10.1-2ubuntu1 (Accepted)

[Shishir Subedi]

python-asyncssh (2.10.1-2ubuntu1) oracular; urgency=medium

  [Nishit Majithia]
  * Fix FTBFS due to unit test cases failures
    - d/p/fix-test_home_percent_expansion_unavailable.patch: Avoid using
      internal members of Path
    - d/p/fix-sha1-tests.patch: Handle elimination of SHA-1 for digital
      signatures in cryptograhy 39.0.0
    - d/p/fix-fido2_related_tests.patch: Increase minimum required fido2
      version to 0.9.2
    - d/p/fix-test_stdout_stream.patch: Read from stdout instead of
      communicate

  [Shishir Subedi]
  * SECURITY UPDATE: Prefix truncation attack on BPP
    - debian/patches/CVE-2023-48795.patch: implement "strict key exchange"
      in connection.py
    - CVE-2023-48795

Date: Thu, 26 Sep 2024 13:00:23 +0545
Changed-By: Shishir Subedi <shishir.subedi at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Alex Murray <alex.murray at canonical.com>
https://launchpad.net/ubuntu/+source/python-asyncssh/2.10.1-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 26 Sep 2024 13:00:23 +0545
Source: python-asyncssh
Built-For-Profiles: noudeb
Architecture: source
Version: 2.10.1-2ubuntu1
Distribution: oracular
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Shishir Subedi <shishir.subedi at canonical.com>
Changes:
 python-asyncssh (2.10.1-2ubuntu1) oracular; urgency=medium
 .
   [Nishit Majithia]
   * Fix FTBFS due to unit test cases failures
     - d/p/fix-test_home_percent_expansion_unavailable.patch: Avoid using
       internal members of Path
     - d/p/fix-sha1-tests.patch: Handle elimination of SHA-1 for digital
       signatures in cryptograhy 39.0.0
     - d/p/fix-fido2_related_tests.patch: Increase minimum required fido2
       version to 0.9.2
     - d/p/fix-test_stdout_stream.patch: Read from stdout instead of
       communicate
 .
   [Shishir Subedi]
   * SECURITY UPDATE: Prefix truncation attack on BPP
     - debian/patches/CVE-2023-48795.patch: implement "strict key exchange"
       in connection.py
     - CVE-2023-48795
Checksums-Sha1:
 abef02ca47ceec02e791b2548aaf34448cab351e 2228 python-asyncssh_2.10.1-2ubuntu1.dsc
 9d9011acabb5fe9210a3dba2b697b81f10906827 14544 python-asyncssh_2.10.1-2ubuntu1.debian.tar.xz
 89f128203d31f3bbb6ac5247a8565bf5d259bdc6 8936 python-asyncssh_2.10.1-2ubuntu1_source.buildinfo
Checksums-Sha256:
 a1fb9d65386bddd23f0a64db97c4ebdf32250ffdb041db04d493be494c2503bc 2228 python-asyncssh_2.10.1-2ubuntu1.dsc
 fc680c81935b06ddf176c6ff4200d09b6442e0157f6d001b8cd32438591fcbc1 14544 python-asyncssh_2.10.1-2ubuntu1.debian.tar.xz
 65be7784d73149a41302bde456889cd5a20301b78bb165cd195722b25da2b970 8936 python-asyncssh_2.10.1-2ubuntu1_source.buildinfo
Files:
 8f5b23dba025f08bd9b20caedbbd29f8 2228 python optional python-asyncssh_2.10.1-2ubuntu1.dsc
 f973364575105a1ddc165b31c0838f9f 14544 python optional python-asyncssh_2.10.1-2ubuntu1.debian.tar.xz
 b74bd82abe8201d8ebdada2352a66d95 8936 python optional python-asyncssh_2.10.1-2ubuntu1_source.buildinfo
Original-Maintainer: Debian Python Team <team+python at tracker.debian.org>