The folowing Ubuntu changes are dropped:
- SECURITY UPDATE: Prefix truncation attack on BPP
- debian/patches/CVE-2023-48795-*.patch: implement strict key
exchange.
- CVE-2023-48795
These changes are backports from upstream and the new debian version contains
these commits.
Per consequence, no need anymore to apply them
- debian/patches/remove_six.patch
This patch is dropped since it is in upstream
- debian/patches/fix_test_on_armhf.patch
This patch is dropped because the file tests/test_transport.py is changed in
the new version and
this patch is not application neither necessary
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-48795
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066061
Title:
Please merge paramiko 3.4.0-1 into Oracular
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/paramiko/+bug/2066061/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
