Closed
Description
This is just a tracking ticket to note that we are aware of the issue described here: https://terrapin-attack.com/ - and have been working with the researchers to release a new Paramiko version that mitigates the described attack pattern.
We expect to put out Paramiko 3.4 within the next day or so. The work in progress is here: https://github.com/paramiko/paramiko/tree/cve-2023-48795