Update to 3.5.0 (rhbz#2312503)
Add support for AES-GCM encryption ciphers (128 and 256 bit variants)
Check for 'None' transport members inside '~paramiko.channel.Channel' when

Update to 3.4.1
Massage our import of the TripleDES cipher to support Cryptography ≥ 43;
Modify a test-harness skiptest check to work with newer versions of
Fix a 64-bit-ism in the test suite so the tests don't encounter a false
bit systems (GH#2353)

Fix detection of SHA1 signing support
Remove cache Sphinx build folder ".doctrees"

Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

Rebuilt for Python 3.13

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

3.4.0
'Transport' grew a new 'packetizer_class' kwarg for overriding the
handler class used internally (mostly for testing, but advanced
Address CVE 2023-48795 (https://terrapin-attack.com/) a.k.a. the "Terrapin
The vulnerability only impacts encrypt-then-MAC digest algorithms in
poly1305; of these, Paramiko
sha2-(256|512)-etm' in tandem with
CBC'; if you are unable to upgrade to Paramiko versions containing
As the fix for the vulnerability requires both ends of the connection to
Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
Key (re)negotiation -- i.e. 'MSG_NEWKEYS', whenever it is encountered --
Sequence number rollover will now raise 'SSHException' if it occurs
Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the

Update to 3.3.1 (rhbz#2227478)
Cleaned up some very old root level files, mostly just to exercise some of

3.3.0
Add support and tests for 'Match final ..' (frequently used in ProxyJump
Add an explicit 'max_concurrent_prefetch_requests' argument to

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Rebuilt for Python 3.12

Update to 3.2.0 (rhbz#2210398)
Fixed a very sneaky bug found at the apparently rarely-traveled
SHA2 keys, certificates, SSH agents, and
than-OpenSSH server targets, which manifested as yet another
The 'server-sig-algs' and 'RSA-SHA2' features added around Paramiko 2.9 or
use pubkey if
Implement '_fields()' on '~paramiko.agent.AgentKey' so that it may be
Since its inception, Paramiko has (for reasons lost to time) implemented
OpenSSH doesn't care if clients send multiple service requests, but other
agent)
This version of Paramiko now contains an opt-in
correctly
handler subclass internally that has been similarly adapted; users
Minor backwards incompatible changes exist in the new code paths, most
GSSAPI support has only been partially implemented, and is untested
Users of '~paramiko.client.SSHClient' can now configure the authentication
level libraries such as 'Fabric'
Fabric's co-temporal release includes a proof-of-concept use of this
Enhanced '~paramiko.agent.AgentKey' with new attributes, such as:
Added a 'comment' attribute (and constructor argument);
Agent-derived keys now attempt to instantiate a copy of the appropriate
specific members (e.g. key size);
This functionality is now in use in Fabric's new '--list-agent-keys'
'~paramiko.pkey.PKey' now offers convenience "meta-constructors", static
For example, 'PKey.from_path' can load a file path without knowing
In addition, 'PKey.from_type_string' now exists, and is being used in
agent keys
As part of these changes, '~paramiko.pkey.PKey' and friends grew a
'~paramiko.pkey.PKey' grew a new '.algorithm_name' property that displays
ed25519' (the SSH protocol key type field value), and now have a
'~paramiko.pkey.PKey' grew a new '.fingerprint' property that emits a
add -l', 'ssh -v'); this is intended to help
vs-OpenSSH behavior and will eventually replace the
'~paramiko.agent.AgentKey' had a dangling Python 3 incompatible '__str__'

Update to 3.1.0 (rhbz#2177436)
Add an explicit 'channel_timeout' keyword argument to
hardcoded default value of 3600 seconds (GH#2009, GH#2013, and
Accept single tabs as field separators (in addition to single spaces) in
Apply 'codespell' to the codebase, which found a lot of very old minor

Update to 3.0.0 (rhbz#2162914)
Remove some unnecessary '__repr__' calls when handling bytes-vs-str
Streamline some redundant (and costly) byte conversion calls in the
'paramiko.util.retry_on_signal' (and any internal uses of same, and also
0475/),
'~paramiko.config.SSHConfig' used to straight-up delete the 'proxycommand'
The behavior of private key classes' (i.e. anything inheriting from
'PKey.__cmp__' has been removed - ordering-oriented comparison of key files
A handful of lower-level classes (notably 'paramiko.message.Message' and
'paramiko.common.asbytes' has been moved to 'paramiko.util.asbytes'
Remove the now irrelevant 'paramiko.py3compat' module
such references should be
and-replaced with their modern Python 3.6+ equivalents; in some
useful methods or values have been moved to 'paramiko.util'
Drop support for Python versions less than 3.6, including Python 2; so long

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild