Package: python-crypto Version: 2.6-4+deb7u4 Severity: normal Dear Maintainer,
After installing the recent security update for python-crypto (2.6-4+deb7u4), the backup tool duplicity stopped working with SSH backend. It reported the following errors: ---- Warning: Duplicity cleanup failed. Warning: Duplicity remove-older-than failed. Error: ssh: Unknown exception: CTR mode needs counter parameter, not IV Error: ssh: Traceback (most recent call last): Error: ssh: File "/usr/lib/python2.7/dist-packages/paramiko/transport.py", line 1542, in run Error: ssh: self.kex_engine.parse_next(ptype, m) Error: ssh: File "/usr/lib/python2.7/dist-packages/paramiko/kex_group1.py", line 68, in parse_next Error: ssh: return self._parse_kexdh_reply(m) Error: ssh: File "/usr/lib/python2.7/dist-packages/paramiko/kex_group1.py", line 107, in _parse_kexdh_reply Error: ssh: self.transport._activate_outbound() Error: ssh: File "/usr/lib/python2.7/dist-packages/paramiko/transport.py", line 1831, in _activate_outbound Error: ssh: engine = self._get_cipher(self.local_cipher, key_out, IV_out) Error: ssh: File "/usr/lib/python2.7/dist-packages/paramiko/transport.py", line 1480, in _get_cipher Error: ssh: return self._cipher_info[name]['class'].new(key, self._cipher_info[name]['mode'], iv, counter) Error: ssh: File "/usr/lib/python2.7/dist-packages/Crypto/Cipher/AES.py", line 94, in new Error: ssh: return AESCipher(key, *args, **kwargs) Error: ssh: File "/usr/lib/python2.7/dist-packages/Crypto/Cipher/AES.py", line 59, in __init__ Error: ssh: blockalgo.BlockAlgo.__init__(self, _AES, key, *args, **kwargs) Error: ssh: File "/usr/lib/python2.7/dist-packages/Crypto/Cipher/blockalgo.py", line 141, in __init__ Error: ssh: self._cipher = factory.new(key, *args, **kwargs) Error: ssh: ValueError: CTR mode needs counter parameter, not IV Error: ssh: Error: BackendException: ssh connection to backupserver.foonet:22 failed: CTR mode needs counter parameter, not IV Fatal: Duplicity failed. ---- It seems that python-crypto breaks python-paramiko. I am not sure if the fault is at python-crypto or python-paramiko. I am reporting it here as it was the update to python-crypto that seemed to have caused the problem. A temporary workaround to this problem is to downgrade python-crypto to version 2.6-4+deb7u3. -- System Information: Debian Release: 7.11 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages python-crypto depends on: ii libc6 2.13-38+deb7u11 ii libgmp10 2:5.0.5+dfsg-2 ii python 2.7.3-4+deb7u1 python-crypto recommends no packages. Versions of packages python-crypto suggests: pn python-crypto-dbg <none> pn python-crypto-doc <none> -- no debconf information Med venlig hilsen/Kind regards Thomas
