Change-Id: Ie129459c89f9e8fcf36c287de5c905fd4a7e7f4f
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/5039
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Anish Swaminathan <anishs@vmware.com>
| 1 | 1 |
deleted file mode 100644 |
| ... | ... |
@@ -1,23 +0,0 @@ |
| 1 |
-From 9c6bc36be24e4c90abd3ef2033223fab97ca5341 Mon Sep 17 00:00:00 2001 |
|
| 2 |
-From: jhall150 <jhall150@bloomberg.net> |
|
| 3 |
-Date: Thu, 31 Mar 2016 10:15:47 -0400 |
|
| 4 |
-Subject: [PATCH] Don't pass IV to pycrypto when using MODE_CTR |
|
| 5 |
- |
|
| 6 |
-* Fixes #713 |
|
| 7 |
- paramiko/transport.py | 2 +- |
|
| 8 |
- 1 file changed, 1 insertion(+), 1 deletion(-) |
|
| 9 |
- |
|
| 10 |
-diff --git a/paramiko/transport.py b/paramiko/transport.py |
|
| 11 |
-index 8eaa094..b286fc5 100644 |
|
| 12 |
-+++ b/paramiko/transport.py |
|
| 13 |
-@@ -1667,7 +1667,7 @@ def _get_cipher(self, name, key, iv): |
|
| 14 |
- elif name.endswith("-ctr"):
|
|
| 15 |
- # CTR modes, we need a counter |
|
| 16 |
- counter = Counter.new(nbits=self._cipher_info[name]['block-size'] * 8, initial_value=util.inflate_long(iv, True)) |
|
| 17 |
-- return self._cipher_info[name]['class'].new(key, self._cipher_info[name]['mode'], iv, counter) |
|
| 18 |
-+ return self._cipher_info[name]['class'].new(key, self._cipher_info[name]['mode'], '', counter) |
|
| 19 |
- else: |
|
| 20 |
- return self._cipher_info[name]['class'].new(key, self._cipher_info[name]['mode'], iv) |
|
| 21 |
- |
| ... | ... |
@@ -3,7 +3,7 @@ |
| 3 | 3 |
|
| 4 | 4 |
Summary: Python SSH module |
| 5 | 5 |
Name: paramiko |
| 6 |
-Version: 1.17.3 |
|
| 6 |
+Version: 1.17.6 |
|
| 7 | 7 |
Release: 1%{?dist}
|
| 8 | 8 |
License: LGPL |
| 9 | 9 |
Group: System Environment/Security |
| ... | ... |
@@ -11,8 +11,7 @@ Vendor: VMware, Inc. |
| 11 | 11 |
Distribution: Photon |
| 12 | 12 |
URL: http://www.paramiko.org/ |
| 13 | 13 |
Source0: https://github.com/paramiko/paramiko/archive/paramiko-%{version}.tar.gz
|
| 14 |
-%define sha1 paramiko=19d4b28401c0fac2df3533bf17d89c53b0d893a4 |
|
| 15 |
-Patch0: paramiko-dont-pass-IV-in-AES-CTR-mode.patch |
|
| 14 |
+%define sha1 paramiko=976685cac8faed4269e09eaa112372cbd0d2803c |
|
| 16 | 15 |
BuildArch: noarch |
| 17 | 16 |
|
| 18 | 17 |
BuildRequires: python-setuptools |
| ... | ... |
@@ -41,7 +40,6 @@ Requires: python3-ecdsa > 0.11 |
| 41 | 41 |
Python 3 version. |
| 42 | 42 |
%prep |
| 43 | 43 |
%setup -q |
| 44 |
-%patch0 -p1 |
|
| 45 | 44 |
|
| 46 | 45 |
%build |
| 47 | 46 |
python setup.py build |
| ... | ... |
@@ -69,6 +67,8 @@ python3 setup.py install -O1 --skip-build \ |
| 69 | 69 |
%{python3_sitelib}/*
|
| 70 | 70 |
|
| 71 | 71 |
%changelog |
| 72 |
+* Thu Apr 19 2018 Xiaolin Li <xiaolinl@vmware.com> 1.17.6-1 |
|
| 73 |
+- Updated to version 1.17.6, fix CVE-2018-7750 |
|
| 72 | 74 |
* Thu Sep 07 2017 Kumar Kaushik <kaushikk@vmware.com> 1.17.3-1 |
| 73 | 75 |
- Updating to version, 1.17.3 bug # 1954210 |
| 74 | 76 |
* Sun Jul 23 2017 Divya Thaluru <dthaluru@vmware.com> 1.16.0-4 |