[ubuntu/precise-updates] paramiko 1.7.7.1-2ubuntu1.2 (Accepted)

[Ubuntu Archive Robot]

paramiko (1.7.7.1-2ubuntu1.2) precise-security; urgency=medium

  * SECURITY UPDATE: server-side authentication vulnerability
    - debian/patches/CVE-2018-1000805-pre.patch: fix MSG_UNIMPLEMENTED in
      paramiko/transport.py, added tests to tests/test_transport.py.
    - debian/patches/CVE-2018-1000805.patch: split messages dict in
      paramiko/auth_handler.py, added tests to tests/test_transport.py.
    - debian/control: added python-mock to Build-Depends.
    - CVE-2018-1000805

paramiko (1.7.7.1-2ubuntu1.1) precise-security; urgency=medium

  * SECURITY UPDATE: customized clients can skip auth
    - 0004-Fixes-CVE-2018-7750-1175.patch: send message failure if not
      authenticated and message type is a service request
    - 0002-Allow-overriding-test-client-connect-kwargs-in-Trans.patch,
      0003-Initial-tests-proving-CVE-2018-7750-1175.patch:
      add testcases plus prereq
    - CVE-2018-7750

Date: 2018-10-17 17:30:13.230793+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/paramiko/1.7.7.1-2ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.