[SECURITY] Fedora 8 Update: python-paramiko-1.7.1-3.fc8

updates at fedoraproject.org updates at fedoraproject.org
Tue Jan 15 22:56:15 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-0644
2008-01-15 22:17:09
--------------------------------------------------------------------------------

Name        : python-paramiko
Product     : Fedora 8
Version     : 1.7.1
Release     : 3.fc8
URL         : http://www.lag.net/paramiko/
Summary     : A SSH2 protocol library for python
Description :
Paramiko (a combination of the esperanto words for "paranoid" and "friend") is
a module for python 2.3 or greater that implements the SSH2 protocol for secure
(encrypted and authenticated) connections to remote machines. Unlike SSL (aka
TLS), the SSH2 protocol does not require heirarchical certificates signed by a
powerful central authority. You may know SSH2 as the protocol that replaced
telnet and rsh for secure access to remote shells, but the protocol also
includes the ability to open arbitrary channels to remote services across an
encrypted tunnel. (This is how sftp works, for example.)

--------------------------------------------------------------------------------
Update Information:

Apply patch to fix recently discovered security problem.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 14 2008 Jeffrey C. Ollie <jeff at ocjtech.us> - 1.7.1-3
- Update to latest Python packaging guidelines.
- Apply patch that fixes insecure use of RandomPool.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #428729 - Paramiko insecure use of RandomPool [Fedora 8]
        https://bugzilla.redhat.com/show_bug.cgi?id=428729
  [ 2 ] Bug #428727 - Paramiko insecure use of RandomPool
        https://bugzilla.redhat.com/show_bug.cgi?id=428727
--------------------------------------------------------------------------------
Updated packages:

ae726416165836ebe5be504bee8856e30e100f50 python-paramiko-1.7.1-3.fc8.noarch.rpm
9cdb89deb4481a9b37e2562fe1eaf266e3155f51 python-paramiko-1.7.1-3.fc8.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update python-paramiko' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------




More information about the package-announce mailing list