|
3 | 3 | Change Log
|
4 | 4 | ==========
|
5 | 5 |
|
| 6 | +Release 2.18.0 (26 Oct 2024) |
| 7 | +---------------------------- |
| 8 | + |
| 9 | +* Added support for post-quantum ML-KEM key exchange algorithms, |
| 10 | + interoperable with OpenSSH 9.9. |
| 11 | + |
| 12 | +* Added support for the OpenSSH "limits" extension, allowing the |
| 13 | + client to query server limits such as the maximum supported read |
| 14 | + and write sizes. The client will automatically default to the reported |
| 15 | + maximum size on servers that support this extension. |
| 16 | + |
| 17 | +* Added more ways to specify environment variables via the `env` option. |
| 18 | + Sequences of either 'key=value' strings or (key, value) tuples are now |
| 19 | + supported, in addition to a dict. |
| 20 | + |
| 21 | +* Added support for getting/setting environment variables as byte strings |
| 22 | + on platforms which support it. Previously, only Unicode strings were |
| 23 | + accepted and they were always encoded on the wire using UTF-8. |
| 24 | + |
| 25 | +* Added support for non-TCP sockets (such as a socketpair) as the `sock` |
| 26 | + parameter in connect calls. Thanks go to Christian Wendt for reporting |
| 27 | + this problem and proposing a fix. |
| 28 | + |
| 29 | +* Changed compression to be disabled by default to avoid it becoming a |
| 30 | + performance bottleneck on high-bandwidth connections. This now also |
| 31 | + matches the OpenSSH default. |
| 32 | + |
| 33 | +* Improved speed of parallelized SFTP reads when read-ahead goes beyond |
| 34 | + the end of the file. Thanks go to Maximilian Knespel for reporting |
| 35 | + this issue and providing performance measurements on the code before |
| 36 | + and after the change. |
| 37 | + |
| 38 | +* Improved cancellation handling during SCP transfers. |
| 39 | + |
| 40 | +* Improved support for selecting the currently available security key |
| 41 | + when the application lists multiple keys to try. Thanks go to GitHub |
| 42 | + user zanda8893 for reporting the issue and helping to work out the |
| 43 | + details of the problem. |
| 44 | + |
| 45 | +* Improved handling of reverse DNS failures in host-based authentication. |
| 46 | + Thanks go to GitHub user xBiggs for suggesting this change. |
| 47 | + |
| 48 | +* Improved debug logging of byte strings with non-printable characters. |
| 49 | + |
| 50 | +* Switched to using an executor on GSSAPI calls to avoid blocking the |
| 51 | + event loop. |
| 52 | + |
| 53 | +* Fixed handling of "UserKnownHostsFile none" in config files. This |
| 54 | + previously caused it to use the default known hosts, rather than |
| 55 | + disabling known host checking. |
| 56 | + |
| 57 | +* Fixed a runtime warning about not awaiting a coroutine in unit tests. |
| 58 | + |
| 59 | +* Fixed a unit test failure on Windows when calling abort on a transport. |
| 60 | + |
| 61 | +* Fixed a problem where a "MAC verification failed" error was sometimes |
| 62 | + sent on connection close. |
| 63 | + |
| 64 | +* Fixed SSHClientProcess code to not raise a runtime exception when |
| 65 | + waiting more than once for a process to finish. Thanks go to GitHub |
| 66 | + user starflows for reporting this issue. |
| 67 | + |
| 68 | +* Handled an error when attempting to import older verions of pyOpenSSL. |
| 69 | + Thanks go to Maximilian Knespel for reporting this issue and testing |
| 70 | + the fix. |
| 71 | + |
| 72 | +* Updated simple_server example code to switch from crypt to bcrypt, |
| 73 | + since crypt has been removed in Python 3.13. Thanks go to Colin |
| 74 | + Watson for providing this update. |
| 75 | + |
6 | 76 | Release 2.17.0 (2 Sep 2024)
|
7 | 77 | ---------------------------
|
8 | 78 |
|
9 |
| -* Add support for specifying a per-connection credential store for GSSAPI |
| 79 | +* Added support for specifying a per-connection credential store for GSSAPI |
10 | 80 | authentication. Thanks go to GitHub user zarganum for suggesting this
|
11 | 81 | feature and proposing a detailed design.
|
12 | 82 |
|
|
0 commit comments