UbuntuUpdates.org

Package "paramiko"

Name: paramiko

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Make ssh v2 connections with Python (Documentation)
  • Make ssh v2 connections with Python (Python 2)
Latest version: 1.10.1-1git1ubuntu0.2
Release: trusty (14.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "paramiko" in Trusty

Repository Area Version
base main 1.10.1-1git1build1
updates main 1.10.1-1git1ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.10.1-1git1ubuntu0.2 2018-10-17 14:06:28 UTC

  paramiko (1.10.1-1git1ubuntu0.2) trusty-security; urgency=medium

  * SECURITY UPDATE: server-side authentication vulnerability
    - debian/patches/CVE-2018-1000805-pre.patch: fix MSG_UNIMPLEMENTED in
      paramiko/transport.py, added tests to tests/test_transport.py.
    - debian/patches/CVE-2018-1000805.patch: split messages dict in
      paramiko/auth_handler.py, added tests to tests/test_transport.py.
    - debian/control: added python-mock to Build-Depends.
    - CVE-2018-1000805

 -- Marc Deslauriers <email address hidden> Tue, 16 Oct 2018 11:21:31 -0400
Source diff to previous version
CVE-2018-1000805 Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in

Version: 1.10.1-1git1ubuntu0.1 2018-03-20 19:06:40 UTC

  paramiko (1.10.1-1git1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: customized clients can skip auth
    - 0004-Fixes-CVE-2018-7750-1175.patch: send message failure if not
      authenticated and message type is a service request
    - 0002-Allow-overriding-test-client-connect-kwargs-in-Trans.patch,
      0003-Initial-tests-proving-CVE-2018-7750-1175.patch:
      add testcases plus prereq
    - CVE-2018-7750
  * debian/rules: actually run the test suite during the build

 -- Steve Beattie <email address hidden> Thu, 15 Mar 2018 16:04:49 -0700
CVE-2018-7750 transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2


About   -   Send Feedback to @ubuntu_updates