summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2022-05-16 20:51:30 -0400
committerJeff Forcier <jeff@bitprophet.org>2022-05-16 20:51:30 -0400
commit77daf90dec14b265beca82df49bf973ffb082e63 (patch)
treefdbe86033d30ef0e48483bce80fae39a2d7ad51f
parentd3f0d01c3eeaef74c0111bd5ade1c66fdfaaa8ec (diff)
downloadparamiko-77daf90dec14b265beca82df49bf973ffb082e63.tar.gz
Changelog re #1933, closes #1933
-rw-r--r--sites/www/changelog.rst5
1 files changed, 5 insertions, 0 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index 2d4c1fcb..2a85f503 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -2,6 +2,11 @@
Changelog
=========
+- :bug:`1933` Align signature verification algorithm with OpenSSH re:
+ zero-padding signatures which don't match their nominal size/length. This
+ shouldn't affect most users, but will help Paramiko-implemented SSH servers
+ handle poorly behaved clients such as PuTTY. Thanks to Jun Omae for catch &
+ patch.
- :bug:`2017` OpenSSH 7.7 and older has a bug preventing it from understanding
how to perform SHA2 signature verification for RSA certificates (specifically
certs - not keys), so when we added SHA2 support it broke all clients using