Skip to content

Version 2.8.8
Compare
Choose a tag to compare
@ploxiln ploxiln released this 01 Dec 04:30
· 87 commits to master since this release
2.8.8
3297fb3
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This patch release includes a fix for a significant security issue.

Fixes:

  • backport #106 / fix paramiko#908: Public key comparison used hash() output (only 32 or 64 bits) - fix to compare full public key values. For more details see https://www.paramiko.org/changelog.html#2.8.1
  • backport #104 / paramiko#1933: rsakey: pad received signature with leading zeros (not needed for openssh, mostly affects paramiko server-mode when client is Putty)
  • backport #107 / paramiko#1024: hostkeys: fix raising KeyError in SubDict.delitem() (inappropriately)
  • backport #109: tests: attempt to make test_cleanup more reliable / less flaky

PR with all backported commits: #110

Assets 2
Loading