Processed: bookworm-pu: package python-asyncssh/2.10.1-2+deb12u2

[Debian Bug Tracking System]

affects -1 + src:python-asyncssh

Bug #1091800 [release.debian.org] bookworm-pu: package python-asyncssh/2.10.1-2+deb12u2
Added indication that 1091800 affects src:python-asyncssh

[Debian Bug Tracking System]

tags -1 + confirmed

Bug #1091800 [release.debian.org] bookworm-pu: package python-asyncssh/2.10.1-2+deb12u2
Added tag(s) confirmed.

[Adam D. Barratt]

Control: tags -1 + confirmed

Fixes for CVE-2023-46445 and CVE-2023-46446 have already been
supplied to sid/trixie and bullseye (via LTS). Only Bookworm is still
affected by these CVEs.

+ python-asyncssh (2.10.1-2+deb12u2~1.gbpfeadf8) UNRELEASED; urgency=high
+
+ ** SNAPSHOT build @feadf821d32b3f10db7b0f238468a1d802a02cc1 **
+
+ * Non-maintainer upload by the Debian LTS team.
+ * UNRELEASED

I'm assuming the noise in the above is purely a result of you doing
test builds and will not be present in the final upload. It would have
been preferable for it not to be in the proposed diff.

Please go ahead.

Regards,

Adam

[Adam D Barratt]

package release.debian.org
tags 1091800 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: python-asyncssh
Version: 2.10.1-2+deb12u2

Explanation: fix "rogue extension negotiation" issue [CVE-2023-46445]; fix "rogue session attack" issue [CVE-2023-46446]

[Debian Bug Tracking System]

Your message dated Sat, 11 Jan 2025 11:03:09 +0000
with message-id <E1tWZGn-009jaa-***@coccia.debian.org>
and subject line Close 1091800
has caused the Debian Bug report #1091800,
regarding bookworm-pu: package python-asyncssh/2.10.1-2+deb12u2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ***@bugs.debian.org
immediately.)