Bump SSH.NET from 2016.1.0 to 2020.0.2 in /Web

Open dependabot[bot] opened this issue 3 years ago • 0 comments

Bumps SSH.NET from 2016.1.0 to 2020.0.2.

Release notes

2020.0.2

This release fixes a security vulnerability in our X25519 key exchange that could allow an attacker to eavesdrop the communications to decrypt them.

More information is available in advisory CVE-2022-29245.

2020.0.1

Fixes

General

Support LF as line ending for banner and identification string

Even though RFC 4253 requires that an identification string MUST be terminated by a carriage return and line feed, this fix restores support for banners and identification strings that are only terminated by a line feed. This is a workaround for an issue in version 7.4 of OpenSSH which was fixed in version 7.5.

Fixes issue #761.

Feedback

Target framework support

While our list of supported target frameworks is impressive, it does come with a cost. Some of these target frameworks are no longer supported by Microsoft and even required software that is no longer available for download.

We'd like to gather feedback from our users through this issue to learn how important it is to continue supporting all these target frameworks.

Twitter

Do you want to keep track of general progress and annoucements for SSH.NET? You can now follow us on Twitter.

Supporting SSH.NET

Do you or your company rely on SSH.NET in your projects? If you want to encourage us to keep on going and show us that you appreciate our work, please consider becoming a sponsor through GitHub Sponsors.

2020.0.0

Changes

Target framework support

This release of SSH.NET adds support for .NET Standard 2.0. This brings the full list of the supported target frameworks to:

.NET Framework 3.5

.NET Framework 4.0 (and higher)

.NET Standard 1.3

.NET Standard 2.0

Silverlight 4

Silverlight 5

Windows Phone 7.1

Windows Phone 8.0

Universal Windows Platform 10

Fixes issue #357, #436 and #474.

... (truncated)

Commits

f1f273c Use cryptographically secure random number generator.
acda143 Prepare for 2020.0.1 release
a06522c Merge branch 'develop'
6e1f839 Merge branch 'develop' of https://github.com/sshnet/SSH.NET into develop
91b6458 Support LF as line ending for banner and identification string
d62594c Update README.md
9c25cf6 Update README.md
b2c36b5 Update README.md
67318d8 Added logo assets (#743)
f480937 Merge branch 'develop'
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Jun 01 '22 23:06 dependabot[bot]