Subject: CVS commit: pkgsrc/security/py-asyncssh
From: Thomas Klausner
Date: 2023-12-18 17:11:17
Message id: 20231218161118.06E50FA42@cvs.NetBSD.org

Log Message:
py-asyncssh: update to 2.14.2.

Release 2.14.2 (18 Dec 2023)
----------------------------

* Implemented "strict kex" support and other countermeasures to
  protect against the Terrapin Attack described in `CVE-2023-48795
  <https://github.com/advisories/GHSA-hfmc-7525-mj55>`. Thanks once
  again go to Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk for
  identifying and reporting this vulnerability and providing detailed
  analysis and suggestions about proposed fixes.

* Fixed config parser to properly an optional equals delimiter in all
  config arguments. Thanks go to Fawaz Orabi for reporting this issue.

* Fixed TCP send error handling to avoid race condition when receiving
  incoming disconnect message.

* Improved type signature in SSHConnection async context manager. Thanks
  go to Pieter-Jan Briers for providing this.

Files:
RevisionActionfile
1.42modifypkgsrc/security/py-asyncssh/Makefile
1.39modifypkgsrc/security/py-asyncssh/distinfo