paramiko (1.7.7.1-2ubuntu1.2) precise-security; urgency=medium
* SECURITY UPDATE: server-side authentication vulnerability
- debian/patches/CVE-2018-1000805-pre.patch: fix MSG_UNIMPLEMENTED in
paramiko/transport.py, added tests to tests/test_transport.py.
- debian/patches/CVE-2018-1000805.patch: split messages dict in
paramiko/auth_handler.py, added tests to tests/test_transport.py.
- debian/control: added python-mock to Build-Depends.
- CVE-2018-1000805
Date: 2018-10-17 17:30:13.230793+00:00
Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa)
Signed-By: Steve Langasek <steve.langa...@canonical.com>
https://launchpad.net/ubuntu/+source/paramiko/1.7.7.1-2ubuntu1.2
Sorry, changesfile not available.
--
Precise-changes mailing list
Precise-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes