-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Oct 2018 14:03:02 +0200 Source: paramiko Binary: paramiko-doc python-paramiko python3-paramiko Architecture: source all Version: 1.15.1-1+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Jeremy T. Bouse <jbouse@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: paramiko-doc - Make ssh v2 connections with Python (Documentation) python-paramiko - Make ssh v2 connections with Python (Python 2) python3-paramiko - Make ssh v2 connections with Python (Python 3) Changes: paramiko (1.15.1-1+deb8u1) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2018-1000805 Fix to prevent malicious clients to trick the Paramiko server into thinking an unauthenticated client is authenticated. * CVE-2018-7750 Fix check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step. Checksums-Sha1: 90b1420f9bc9a35da094d2193a1c16028630cf68 2431 paramiko_1.15.1-1+deb8u1.dsc 61d721b83d851b2cfbf9d9bec7c8497ce1467b5e 258258 paramiko_1.15.1.orig.tar.gz 1c60167d71b64c2586fa02870cebb7feb3e09d09 8856 paramiko_1.15.1-1+deb8u1.debian.tar.xz 14255c9f47da7ee8f5ac3457a8af5eb10869a15d 620052 paramiko-doc_1.15.1-1+deb8u1_all.deb fcbcc7af3e4d7801cbefd199143fc7f2d1004fae 107638 python-paramiko_1.15.1-1+deb8u1_all.deb bd493deb89cab96bc11de875610e18c1cf926728 107706 python3-paramiko_1.15.1-1+deb8u1_all.deb Checksums-Sha256: 04aee8fe4c6b37a5c1c0396613956811bf65849aca0ba6c76eae0ffa43394410 2431 paramiko_1.15.1-1+deb8u1.dsc f099065267367894e760f2d2f7417e0da4c6fe75a2f311807ea4c5504376257f 258258 paramiko_1.15.1.orig.tar.gz 98d59638d6d33120f8b8e9f09d9e62b72283648be4adcaa15425adbef78ee86d 8856 paramiko_1.15.1-1+deb8u1.debian.tar.xz 24bf6ade0b6919f57886eefe08a494deecfd843750d647fe00de000807667373 620052 paramiko-doc_1.15.1-1+deb8u1_all.deb 4c0b790b4f013de48c77f1b5111ff49228aa8a293c73ecd960d4383791bc2222 107638 python-paramiko_1.15.1-1+deb8u1_all.deb 27c66f528b004fcf2424cd08154f4e9057a4362b301d45e0412324b84222edff 107706 python3-paramiko_1.15.1-1+deb8u1_all.deb Files: 6048a847ebf515dfb56d511bbcb0cf15 2431 python optional paramiko_1.15.1-1+deb8u1.dsc 6d6c1f464457fc97279ef7a72b13f2cc 258258 python optional paramiko_1.15.1.orig.tar.gz 37bde11a94cc1c3c7eff453e7f346219 8856 python optional paramiko_1.15.1-1+deb8u1.debian.tar.xz 3c83b0052826e398b2bb0e238af67d63 620052 doc optional paramiko-doc_1.15.1-1+deb8u1_all.deb 91a60f4c9173a283e4078264d7c74cad 107638 python optional python-paramiko_1.15.1-1+deb8u1_all.deb c998d777a475f69bf6507b9722ad341e 107706 python optional python3-paramiko_1.15.1-1+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlvUYS9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR87MD/9FPeb+GoxrpYEVlOQlydDfInKDOi5R 3+8Gmuxfpufhz0Ms6knCvxaGE13lwuDJSSpeS8EkmayMEviBYkAoTMxFKNoJS5Fy OX91Elq8r8NQCl5rkRQFxxDUmjUO85kOgjXKl2SuN8F7BvCqQzaDx7oE3Nc3IgUU +H4n9+iQM3Du7AQfbA4vaA11E6i26oEK0uep9Y4VA+bN2tblc7kdXQj4IW6k0MX5 Wbi+Q3a4u8Qf4BhJc/iyABb3vZIQM3mPjKCotDCM8EtnBh87bRFDis1UM2CxlZFK nVcw4NRvrmXB3NCt8cyvOwOQZtGWtL+7Ivp2LzFQcsuJOyxyxOqGTkRHN8giiUgd VaQ0SZb8Ixlyk2iYxPEcbdmCqmGYqsZrKgFSweDo9vkXlp/M7AZJ0U7GEWoDSf/8 rNfTM3gdhRKjd0jSY/HNN6Vb7UMDmneh0aLdjnP2mqHj+/fvxRx+/UXoRLxT7upv QpN6S0sFwXtIWrTLb4Aoggz4CjXy7qyoj6mvxvQ2Wt5akN9AE4gYd48UBwL6CNWg /aFLX37QjXC1a25hqjKdhRJpWu8sIN2TW9ezpPp+fhREf1NijIVi34BRdRqw+aYr PaflLo/WgjashWM6Q8eMyfTDtQUGAFw9i/wX7k3MORYrFjnAH+SXrGNySRrlhnMu ad8pJnSdnxDyMw== =SZN7 -----END PGP SIGNATURE-----