Your message dated Mon, 09 Jul 2012 16:17:26 +0000
with message-id <e1sogem-0004jl...@franck.debian.org>
and subject line Bug#659007: fixed in paramiko 1.7.7.1-3
has caused the Debian Bug report #659007,
regarding Transfers fail after 1GB; rekeying window too small
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
659007: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659007
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: python-paramiko
Version: 1.7.7.1-2
Severity: normal
i've had reports about paramiko bungling a self-initiated rekey operation
by not waiting long enough for the other party to respond before
it throws an exception (see #660378).
lines 374++ of packet.py show that paramiko waits no more than 20 packets
until after sending a key exchange request before it gives up.
section 7.1 of the ssh rfc (https://tools.ietf.org/html/rfc4253#section-7.1)
says quite explicitely that this is not the way to go:
Note, however, that during a key re-exchange, after sending a
SSH_MSG_KEXINIT message, each party MUST be prepared to process an
arbitrary number of messages that may be in-flight before receiving a
SSH_MSG_KEXINIT message from the other party.
with a large tcp window, a high-rtt path and a busy ssh session
i'm quite certain that 20+ packets can be 'in-flight' when paramiko
wants a rekey.
to me it looks as if this packet count limit should either be raised
substantially, or the code in question rewritten completely with
a different heuristic for when to give up.
regards
az
--- End Message ---
--- Begin Message ---
Source: paramiko
Source-Version: 1.7.7.1-3
We believe that the bug you reported is fixed in the latest version of
paramiko, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 659...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy T. Bouse <jbo...@debian.org> (supplier of updated paramiko package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 09 Jul 2012 11:02:38 -0400
Source: paramiko
Binary: python-paramiko
Architecture: source all
Version: 1.7.7.1-3
Distribution: unstable
Urgency: low
Maintainer: Jeremy T. Bouse <jbo...@debian.org>
Changed-By: Jeremy T. Bouse <jbo...@debian.org>
Description:
python-paramiko - Make ssh v2 connections with Python
Closes: 659007 668239
Changes:
paramiko (1.7.7.1-3) unstable; urgency=low
.
* Accept NMU uploads (Closes: #659007, #668239)
* Update package to clean up lintian findings
* debian/source/local-options: set unapply-patches option
* debian/watch: Don't need to use uupdate with gbp
* debian/control: Upgrade Debian Standard (no changes needed)
Checksums-Sha1:
74419a44318df83a1ea80f2181db1f0073aaf939 1345 paramiko_1.7.7.1-3.dsc
c2872d231ed52d1bb48dc7351d8099376143b020 5357 paramiko_1.7.7.1-3.debian.tar.gz
3ef20f1e8c453c26e6dc33c310d720d57d92d60c 806772
python-paramiko_1.7.7.1-3_all.deb
Checksums-Sha256:
8bf5b2dc47f8069a75cf64f741c99576378d6a538376c82de2142769c6fd0db3 1345
paramiko_1.7.7.1-3.dsc
b0b3d8d8c933a235597fb0a4a43f30e36ba468d590d098a5a5632014f60ae457 5357
paramiko_1.7.7.1-3.debian.tar.gz
749a3e3db2aacb9ebbb44fde63327eeeae6da0cfc83930f090c5ddd05beb5f35 806772
python-paramiko_1.7.7.1-3_all.deb
Files:
3dae5b390b64b5e1ce5f071092359fb2 1345 python optional paramiko_1.7.7.1-3.dsc
94c9e27d03bc91502202cd7ee9596162 5357 python optional
paramiko_1.7.7.1-3.debian.tar.gz
b10eae4c9cccc0267541bdb24250aa9f 806772 python optional
python-paramiko_1.7.7.1-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iF4EAREIAAYFAk/7AUgACgkQ8C9U2GaKntdj/gD6A2LkQbDmuewcq8bBpsIbQsOw
gP+FPJWkoRt0zMmvgiQA/0uR7Rqcus16HFy5Aj7h/KwOFlrlR9oSKRoHR/5MRUbZ
=X20d
-----END PGP SIGNATURE-----
--- End Message ---
