new file mode 100644

@@ -0,0 +1,66 @@

+diff -ru a/paramiko/auth_handler.py b/paramiko/auth_handler.py

+--- a/paramiko/auth_handler.py	2019-01-25 18:56:51.783771842 +0000

+@@ -603,13 +603,37 @@

+             return

+         self._send_auth_result(self.auth_username, 'keyboard-interactive', result)

+ 

+-    _handler_table = {

++    # TODO: do the same to the other tables, in Transport.

++    # TODO 3.0: MAY make sense to make these tables into actual

++    # classes/instances that can be fed a mode bool or whatever. Or,

++    # alternately (both?) make the message types small classes or enums that

++    # embed this info within themselves (which could also then tidy up the

++    # current 'integer -> human readable short string' stuff in common.py).

++    # TODO: if we do that, also expose 'em publicly.

++

++    # Messages which should be handled _by_ servers (sent by clients)

++    _server_handler_table = {

+         MSG_SERVICE_REQUEST: _parse_service_request,

+-        MSG_SERVICE_ACCEPT: _parse_service_accept,

+         MSG_USERAUTH_REQUEST: _parse_userauth_request,

++        MSG_USERAUTH_INFO_RESPONSE: _parse_userauth_info_response,

++    }

++

++    # Messages which should be handled _by_ clients (sent by servers)

++    _client_handler_table = {

++        MSG_SERVICE_ACCEPT: _parse_service_accept,        

+         MSG_USERAUTH_SUCCESS: _parse_userauth_success,

+         MSG_USERAUTH_FAILURE: _parse_userauth_failure,

+         MSG_USERAUTH_BANNER: _parse_userauth_banner,

+         MSG_USERAUTH_INFO_REQUEST: _parse_userauth_info_request,

+-        MSG_USERAUTH_INFO_RESPONSE: _parse_userauth_info_response,

+     }

++

++    # NOTE: prior to the fix for #1283, this was a static dict instead of a

++    # property. Should be backwards compatible in most/all cases.

++    @property

++    def _handler_table(self):

++        if self.transport.server_mode:

++            return self._server_handler_table

++        else:

++            return self._client_handler_table

++

++    

+diff -ru a/sites/www/changelog.rst b/sites/www/changelog.rst

+--- a/sites/www/changelog.rst	2019-01-25 18:56:51.795771784 +0000

+@@ -3,6 +3,18 @@

+ =========

+ 

+ * :release:`1.17.6 <2018-03-12>`

++- :bug:`1283 (1.17+)` Fix exploit (CVE-2018-1000805) in Paramiko's server mode

++  (**not** client mode) where hostile clients could trick the server into

++  thinking they were authenticated without actually submitting valid

++  authentication.

++

++  Specifically, steps have been taken to start separating client and server

++  related message types in the message handling tables within ``Transport`` and

++  ``AuthHandler``; this work is not complete but enough has been performed to

++  close off this particular exploit (which was the only obvious such exploit

++  for this particular channel).

++

++  Thanks to Daniel Hoffman for the detailed report.

+ * :bug:`1175 (1.17+)` Fix a security flaw (CVE-2018-7750) in Paramiko's server

+   mode (emphasis on **server** mode; this does **not** impact *client* use!)

+   where authentication status was not checked before processing channel-open

@@ -4,7 +4,7 @@

 Summary:        Python SSH module

 Name:           paramiko

 Version:        1.17.6

-Release:        1%{?dist}

+Release:        2%{?dist}

 License:        LGPL

 Group:          System Environment/Security

 Vendor:         VMware, Inc.

@@ -12,6 +12,7 @@ Distribution:   Photon

 URL: http://www.paramiko.org/

 Source0: https://github.com/paramiko/paramiko/archive/paramiko-%{version}.tar.gz

 %define sha1 paramiko=976685cac8faed4269e09eaa112372cbd0d2803c

+Patch0:		paramiko-CVE-2018-1000805.patch		

 BuildArch:      noarch

 BuildRequires:  python-setuptools

@@ -40,6 +41,7 @@ Requires:       python3-ecdsa > 0.11

 Python 3 version.

 %prep

 %setup -q

+%patch0 -p1

 %build

 python setup.py build

@@ -67,6 +69,8 @@ python3 setup.py install -O1 --skip-build \

 %{python3_sitelib}/*

 %changelog

+*   Mon Jan 28 2019 Siju Maliakkal <smaliakkal@vmware.com> 1.17.6-2

+-   Applied patch for CVE-2018-1000805

 *   Thu Apr 19 2018 Xiaolin Li <xiaolinl@vmware.com> 1.17.6-1

 -   Updated to version 1.17.6, fix CVE-2018-7750

 *   Thu Sep 07 2017 Kumar Kaushik <kaushikk@vmware.com> 1.17.3-1