public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Georg Sauthoff <mail@gms.tf>
To: git-commits@fedoraproject.org
Subject: [rpms/python-asyncssh] f43: import asyncssh 2.23.1
Date: Sat, 11 Jul 2026 22:42:50 GMT [thread overview]
Message-ID: <178380977068.1.17625229692380182108.rpms-python-asyncssh-003ef79aeb4d@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/python-asyncssh
Branch : f43
Commit : 003ef79aeb4d9b7b8fab142ed43c3132f01ea4d2
Author : Georg Sauthoff <mail@gms.tf>
Date : 2026-07-12T00:38:45+02:00
Stats : +12/-9 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/python-asyncssh/c/003ef79aeb4d9b7b8fab142ed43c3132f01ea4d2?branch=f43
Log:
import asyncssh 2.23.1
- fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape (fixes fedora#2498421, fixes fedora#2498423)
- fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client (fixes fedora#2498488)
---
diff --git a/python-asyncssh.spec b/python-asyncssh.spec
index a8fb37c..8600ce2 100644
--- a/python-asyncssh.spec
+++ b/python-asyncssh.spec
@@ -5,7 +5,7 @@ implements many SSH protocol features such as the various channels,\
SFTP, SCP, forwarding, session multiplexing over a connection and more.
Name: python-%{srcname}
-Version: 2.21.0
+Version: 2.23.1
Release: %autorelease
Summary: Asynchronous SSH for Python
@@ -15,8 +15,10 @@ URL: https://github.com/ronf/asyncssh
Source0: %pypi_source
+
BuildArch: noarch
+
# required by unittests
BuildRequires: nmap-ncat
BuildRequires: openssh-clients
@@ -24,9 +26,6 @@ BuildRequires: openssl
BuildRequires: python3-gssapi
-# for ed25519 etc.
-Recommends: python3-libnacl
-
# for OpenSSH private key encryption
Suggests: python3-bcrypt
# for GSSAPI key exchange/authentication
@@ -36,6 +35,7 @@ Suggests: python3-pyOpenSSL
# for U2F etc. support
Suggests: python3-fido2
+
%description
%{desc}
@@ -48,10 +48,13 @@ Summary: %{summary}
%prep
%autosetup -p1 -n %{srcname}-%{version}
-# XXX remove again when python3-cryptography dependency spec
-# of python3-fido2 is fixed in rawhide
-# cf. https://bugzilla.redhat.com/show_bug.cgi?id=2368966
-sed -i '/fido2/d' pyproject.toml tox.ini
+
+# remove superfluous build dependencies
+sed '/pytest-cov/d' tox.ini -i # coverage not desired
+sed -E '/(uvloop|python-pkcs11)/d' tox.ini -i # not available, tests skipped when missing
+# sometimes upstream is too eager to bump this dependency,
+# e.g. due to 'Vulnerable OpenSSL included in cryptography wheels'
+sed "s/cryptography >= [^']\+/cryptography/" pyproject.toml -i
%generate_buildrequires
diff --git a/sources b/sources
index 598973b..e5cc98b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (asyncssh-2.21.0.tar.gz) = d634e0f731721a430d7b77cf07fc853edf78657bfbda9c49bb17379e0d57c65bec5ff116512c3b542dfdf8ec2aef44342eb4a8028d5513aab8cbe0c3921bda3e
+SHA512 (asyncssh-2.23.1.tar.gz) = 26e25ba1bc4cbed9ae11ed10e83cc3e10421f36dce4202d1e7f89bd23ba86d41c3dec7d9e15f2e6d733da84fa748e626eba4f43b5e1f17ec496bc9cbc879ee16
reply other threads:[~2026-07-11 22:42 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178380977068.1.17625229692380182108.rpms-python-asyncssh-003ef79aeb4d@fedoraproject.org \
--to=mail@gms.tf \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox