diff --git a/asyncssh/version.py b/asyncssh/version.py index cb283dd..5fae86e 100644 --- a/asyncssh/version.py +++ b/asyncssh/version.py @@ -26,4 +26,4 @@ __url__ = 'http://asyncssh.timeheart.net' -__version__ = '2.14.1' +__version__ = '2.14.2' diff --git a/docs/changes.rst b/docs/changes.rst index fbcb2fc..5d0a402 100644 --- a/docs/changes.rst +++ b/docs/changes.rst @@ -3,6 +3,25 @@ Change Log ========== +Release 2.14.2 (18 Dec 2023) +---------------------------- + +* Implemented "strict kex" support and other countermeasures to + protect against the Terrapin Attack described in `CVE-2023-48795 + `. Thanks once + again go to Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk for + identifying and reporting this vulnerability and providing detailed + analysis and suggestions about proposed fixes. + +* Fixed config parser to properly an optional equals delimiter in all + config arguments. Thanks go to Fawaz Orabi for reporting this issue. + +* Fixed TCP send error handling to avoid race condition when receiving + incoming disconnect message. + +* Improved type signature in SSHConnection async context manager. Thanks + go to Pieter-Jan Briers for providing this. + Release 2.14.1 (8 Nov 2023) ---------------------------