You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

39 lines
1.1 KiB

python3-paramiko: update to version 2.10.1 2.10.1: - [Bug]: (CVE-2022-24302) Creation of new private key files using PKey subclasses was subject to a race condition between file creation & mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files. - This has been patched by using os.open and os.fdopen to ensure new files are opened with the correct mode immediately. We’ve left the subsequent explicit chmod in place to minimize any possible disruption, though it may get removed in future backwards- incompatible updates. - Thanks to Jan Schejbal for the report & feedback on the solution, and to Jeremy Katz at Tidelift for coordinating the disclosure. 2.10.0: - [Feature] Add support for OpenSSH’s Windows agent as a fallback when Putty/WinPageant isn’t available or functional. Reported by @benj56 with patches/PRs from @lewgordon and Patrick Spendrin. - [Feature] Add support for the %C token when parsing SSH config files. Foundational PR submitted by @jbrand42. - [Bug] Significantly speed up low-level read/write actions on SFTPFile objects by using bytearray/memoryview. This is unlikely to change anything for users of the higher level methods like SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will likely see orders of magnitude improvements for files larger than a few megabytes in size. - Thanks to @jkji for the original report and to Sevastian Tchernov for the patch. - [Support] Add six explicitly to install-requires; it snuck into active use at some point but has only been indicated by transitive dependency on bcrypt until they somewhat-recently dropped it. This will be short-lived until we drop Python 2 support. Thanks to Sondre Lillebø Gundersen for catch & patch. Signed-off-by: Javier Marcet <javier@marcet.info>
3 years ago
python3-paramiko: update to version 2.10.1 2.10.1: - [Bug]: (CVE-2022-24302) Creation of new private key files using PKey subclasses was subject to a race condition between file creation & mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files. - This has been patched by using os.open and os.fdopen to ensure new files are opened with the correct mode immediately. We’ve left the subsequent explicit chmod in place to minimize any possible disruption, though it may get removed in future backwards- incompatible updates. - Thanks to Jan Schejbal for the report & feedback on the solution, and to Jeremy Katz at Tidelift for coordinating the disclosure. 2.10.0: - [Feature] Add support for OpenSSH’s Windows agent as a fallback when Putty/WinPageant isn’t available or functional. Reported by @benj56 with patches/PRs from @lewgordon and Patrick Spendrin. - [Feature] Add support for the %C token when parsing SSH config files. Foundational PR submitted by @jbrand42. - [Bug] Significantly speed up low-level read/write actions on SFTPFile objects by using bytearray/memoryview. This is unlikely to change anything for users of the higher level methods like SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will likely see orders of magnitude improvements for files larger than a few megabytes in size. - Thanks to @jkji for the original report and to Sevastian Tchernov for the patch. - [Support] Add six explicitly to install-requires; it snuck into active use at some point but has only been indicated by transitive dependency on bcrypt until they somewhat-recently dropped it. This will be short-lived until we drop Python 2 support. Thanks to Sondre Lillebø Gundersen for catch & patch. Signed-off-by: Javier Marcet <javier@marcet.info>
3 years ago
  1. include $(TOPDIR)/rules.mk
  2. PKG_NAME:=python-paramiko
  3. PKG_VERSION:=2.10.1
  4. PKG_RELEASE:=1
  5. PYPI_NAME:=paramiko
  6. PKG_HASH:=443f4da23ec24e9a9c0ea54017829c282abdda1d57110bf229360775ccd27a31
  7. PKG_MAINTAINER:=Javier Marcet <javier@marcet.info>
  8. PKG_LICENSE:=LGPL-2.1-or-later
  9. PKG_LICENSE_FILES:=LICENSE
  10. include ../pypi.mk
  11. include $(INCLUDE_DIR)/package.mk
  12. include ../python3-package.mk
  13. PYTHON3_PKG_SETUP_ARGS:=
  14. define Package/python3-paramiko
  15. SECTION:=lang
  16. CATEGORY:=Languages
  17. SUBMENU:=Python
  18. TITLE:=SSH2 protocol library
  19. URL:=https://github.com/paramiko/paramiko/
  20. DEPENDS:=+python3-light +python3-logging +python3-bcrypt \
  21. +python3-cryptography +python3-openssl +python3-pynacl
  22. endef
  23. define Package/python3-paramiko/description
  24. Paramiko is a Python (2.7, 3.4+) implementation of the SSHv2 protocol,
  25. providing both client and server functionality. While it leverages a Python
  26. C extension for low level cryptography (Cryptography), Paramiko itself is a
  27. pure Python interface around SSH networking concepts.
  28. endef
  29. $(eval $(call Py3Package,python3-paramiko))
  30. $(eval $(call BuildPackage,python3-paramiko))
  31. $(eval $(call BuildPackage,python3-paramiko-src))