Your message dated Fri, 18 Jul 2008 12:32:07 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#490961: fixed in paramiko 1.7.4-0.1
has caused the Debian Bug report #490961,
regarding paramiko random number regression: Stop using RandomPool
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
490961: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490961
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: paramiko
Version: 1.7.3-1
Severity: serious
Tags: security, patch
See http://www.lag.net/pipermail/paramiko/2008-April/000678.html
"Revision #486 [1] (and therefore Paramiko 1.7.3) re-introduces the
problems associated with PyCrypto's RandomPool class that I described
in my post back in January. RandomPool is not a simple "get random
bits" primitive, but paramiko is again using it as one."
Patch at http://www.lag.net/pipermail/paramiko/2008-April/000679.html
This is fixed in the new upstream 1.7.4 as well.
--- End Message ---
--- Begin Message ---
Source: paramiko
Source-Version: 1.7.4-0.1
We believe that the bug you reported is fixed in the latest version of
paramiko, which is due to be installed in the Debian FTP archive:
paramiko_1.7.4-0.1.diff.gz
to pool/main/p/paramiko/paramiko_1.7.4-0.1.diff.gz
paramiko_1.7.4-0.1.dsc
to pool/main/p/paramiko/paramiko_1.7.4-0.1.dsc
paramiko_1.7.4.orig.tar.gz
to pool/main/p/paramiko/paramiko_1.7.4.orig.tar.gz
python-paramiko_1.7.4-0.1_all.deb
to pool/main/p/paramiko/python-paramiko_1.7.4-0.1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Matthias Klose <[EMAIL PROTECTED]> (supplier of updated paramiko package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 18 Jul 2008 14:16:08 +0200
Source: paramiko
Binary: python-paramiko
Architecture: source all
Version: 1.7.4-0.1
Distribution: unstable
Urgency: medium
Maintainer: Jeremy T. Bouse <[EMAIL PROTECTED]>
Changed-By: Matthias Klose <[EMAIL PROTECTED]>
Description:
python-paramiko - Make ssh v2 connections with python
Closes: 490961
Changes:
paramiko (1.7.4-0.1) unstable; urgency=medium
.
* NMU.
* New upstream version.
- Fix random number regression (stop using RandomPool). Closes: #490961.
Checksums-Sha1:
ae4594c410047605b4afc1c0f48fe2b83c0c68ee 1089 paramiko_1.7.4-0.1.dsc
632f3d85cdeed7906f788a9fbb9a97a1fea580a2 869046 paramiko_1.7.4.orig.tar.gz
754f95f16eb263af229f7dcf1fd8175e67fe8f2f 2348 paramiko_1.7.4-0.1.diff.gz
56505733e0a2ea55abf9c31ca7185bf7db029ced 125062
python-paramiko_1.7.4-0.1_all.deb
Checksums-Sha256:
aee5ff946707b95779e84ec64a1f847fae9eb4de5546fca211501d1155c2d68d 1089
paramiko_1.7.4-0.1.dsc
b29d83879f34e7cd74578b10f731739380fe882284fdf2b4a283f4c691f8d4cf 869046
paramiko_1.7.4.orig.tar.gz
4432e48a98040d5e6dc1b88fc6525667cff2e8047e322cf743d5a84e6925d266 2348
paramiko_1.7.4-0.1.diff.gz
575847cb4e3523abc6cec49c53e387ffd285492883b388f596e75d6d602d6b0d 125062
python-paramiko_1.7.4-0.1_all.deb
Files:
89e72bb1f12a6dab16e5bc0c53cf0790 1089 python optional paramiko_1.7.4-0.1.dsc
03e724174ce815a86010eb85a80e232d 869046 python optional
paramiko_1.7.4.orig.tar.gz
186aba854daf2517ab208454dd1a46f9 2348 python optional
paramiko_1.7.4-0.1.diff.gz
d84a015d31df10f70fe194d116f0f129 125062 python optional
python-paramiko_1.7.4-0.1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkiAicwACgkQStlRaw+TLJyZWwCdHXDFatjctDJTouSKRxB4i7fz
SRQAnjK94LXZddcLnB1AnHMYz8l9EVvh
=ai8Z
-----END PGP SIGNATURE-----
--- End Message ---
