Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-asyncssh for openSUSE:Factory
checked in at 2026-09-22 15:54:05
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-asyncssh (Old)
and /work/SRC/openSUSE:Factory/.python-asyncssh.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-asyncssh"
Tue Sep 22 15:54:05 2026 rev:35 rq:1379678 version:2.24.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-asyncssh/python-asyncssh.changes
2026-06-16 18:49:15.123450681 +0200
+++
/work/SRC/openSUSE:Factory/.python-asyncssh.new.383539/python-asyncssh.changes
2026-09-22 15:55:40.556318734 +0200
@@ -1,0 +2,15 @@
+Tue Sep 22 12:18:36 UTC 2026 - Nico Krapp <[email protected]>
+
+- Update to 2.24.0 (fixes CVE-2026-62949 (bsc#1280972))
+ * Added support for creating and validating SSHSIG signatures, as well as
+ OpenSSH "allowed signers" files.
+ * Added support for ML-KEM key exchange from the PyCA cryptography package
+ when it is available. This avoids the need to have the liboqs library
+ installed to use ML-KEM. However, liboqs is still required to support
+ SNTRUP kex exchange.
+ * Fixed an issue with handling of SSH maximum packet size when opening a new
+ SSH channel, aborting with a protocol error if a peer attempts to set this
+ size to 0.
+ * Fixed an issue with include directives in OpenSSH config files.
+
+-------------------------------------------------------------------
Old:
----
asyncssh-2.23.1.tar.gz
New:
----
asyncssh-2.24.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-asyncssh.spec ++++++
--- /var/tmp/diff_new_pack.EAEdaG/_old 2026-09-22 15:55:41.165343823 +0200
+++ /var/tmp/diff_new_pack.EAEdaG/_new 2026-09-22 15:55:41.167343906 +0200
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-asyncssh
-Version: 2.23.1
+Version: 2.24.0
Release: 0
Summary: Asynchronous SSHv2 client and server library
License: EPL-2.0 OR GPL-2.0-or-later
++++++ asyncssh-2.23.1.tar.gz -> asyncssh-2.24.0.tar.gz ++++++
++++ 2284 lines of diff (skipped)
