Skip to content

Version 2.7.10
Compare
Choose a tag to compare
@ploxiln ploxiln released this 01 Dec 04:07
· 179 commits to master since this release
2.7.10
e6be128
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This patch release includes a fix for a significant security issue.

Fixes:

  • backport #106 / fix paramiko#908: Public key comparison used hash() output (only 32 or 64 bits) - fix to compare full public key values. For more details see https://www.paramiko.org/changelog.html#2.8.1
  • backport #104 / paramiko#1933: rsakey: pad received signature with leading zeros (not needed for openssh, mostly affects paramiko server-mode when client is Putty)
  • backport #96 / paramiko#1884: fix sftp performance regression in asbytes() (introduced in paramiko and paramiko-ng 2.5.0)
  • backport #107 / paramiko#1024: hostkeys: fix raising KeyError in SubDict.delitem() (inappropriately)
  • backport #95 / paramiko#1765: gss: fix KexGSSGroup1 client mode with Python3
  • backport #97 / paramiko#1870: update Thread method calls deprecated in Python-3.10
  • backport #109: tests: attempt to make test_cleanup more reliable / less flaky

PR with all backported commits: #111

Assets 2
Loading