python/python-paramiko
SHA256
15
0
Fork 0
forked from pool/python-paramiko
Code Pull Requests Activity

Accepting request 640130 from home:mimi_vx:branches:devel:languages:python

Browse Source 
- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
 * Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
     where hostile clients could trick the server into thinking they were
     authenticated without actually submitting valid authentication.
 * Modify protocol message handling such that Transport does not respond
    to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
 * Updated SSHConfig.lookup <paramiko.config.SSHConfig.lookup> so it returns
    a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
    in lieu of dict literals.

OBS-URL: https://build.opensuse.org/request/show/640130
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-paramiko?expand=0&rev=73
This commit is contained in:
Tomáš Chvátal
2018-10-06 16:35:47 +00:00
committed by Git OBS Bridge
parent 73ed2fe7e7
commit 8972085b00
5 changed files with 38 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
python-paramiko.changes
View File

@@ -1,3 +1,17 @@
-------------------------------------------------------------------
Fri Oct 5 08:26:46 UTC 2018 - Ondřej Súkup <mimi.vx@gmail.com>
- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
* Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
where hostile clients could trick the server into thinking they were
authenticated without actually submitting valid authentication.
* Modify protocol message handling such that Transport does not respond
to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
* Updated SSHConfig.lookup <paramiko.config.SSHConfig.lookup> so it returns
a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
in lieu of dict literals.
-------------------------------------------------------------------
Thu Mar 15 18:38:22 CET 2018 - ro@suse.de