UbuntuUpdates.org

Package "paramiko"

Name: paramiko

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Make ssh v2 connections with Python (Documentation)
  • Make ssh v2 connections (Python 2)
  • Make ssh v2 connections (Python 3)

Latest version: 2.0.0-1ubuntu0.1
Release: artful (17.10)
Level: updates
Repository: main

Links

Save this URL for the latest version of "paramiko": https://www.ubuntuupdates.org/paramiko



Other versions of "paramiko" in Artful

Repository Area Version
base main 2.0.0-1
security main 2.0.0-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.

paramiko-doc python-paramiko python3-paramiko

Changelog

Version: 2.0.0-1ubuntu0.1 2018-03-20 21:06:40 UTC

  paramiko (2.0.0-1ubuntu0.1) artful-security; urgency=medium

  [Steve Beattie]
  * SECURITY UPDATE: customized clients can skip auth
    - 0004-Fixes-CVE-2018-7750-1175.patch: send message failure if not
      authenticated and message type is a service request
    - 0002-Allow-overriding-test-client-connect-kwargs-in-Trans.patch,
      0003-Initial-tests-proving-CVE-2018-7750-1175.patch:
      add testcases plus prereq
    - CVE-2018-7750

  [ Fabien Tassin ]
  * SECURITY UPDATE: weak diffie-hellman-group1-sha1 kex always preferred (LP: #1728607)
    - 0010-git-c1233679c44-change-order-of-preferred-kex-and-hmac-algorithms.patch
    - 0011-git-b395444062e-Reorder-cipher-and-key-preferences-to-make-more-sense.patch
    Backport of the upstream changes from 2.3.1, matching the OpenSSH 7
    deprecation of diffie-hellman-group1-sha1 (http://www.openssh.com/legacy.html).
    This patch doesn't remove the support of diffie-hellman-group1-sha1 but
    makes it the least preferred kex for backward compatibility

 -- Steve Beattie <email address hidden> Fri, 16 Mar 2018 15:44:26 -0700

1728607 weak preferred kex in 16.04 LTS
CVE-2018-7750 transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2



About   -   Send Feedback to @ubuntu_updates