This bug was fixed in the package paramiko - 3.4.0-1ubuntu1 --------------- paramiko (3.4.0-1ubuntu1) oracular; urgency=medium
* Merge with Debian unstable. Remaining changes (LP: #2066061): - d/control: Demote python3-invoke from Recommends to Suggests as the python-invoke package lacks unit test execution so is not suitable for main inclusion - debian/patches/disable_flaky_test.patch: disable flaky test_sequence_numbers_reset_on_newkeys_when_strict test. Dropped changes: - SECURITY UPDATE: Prefix truncation attack on BPP - debian/patches/CVE-2023-48795-*.patch: implement strict key exchange. - CVE-2023-48795 Dropped because these patches are applied upstream - debian/patches/remove_six.patch : removed because already upstreamed - debian/patches/fix_test_on_armhf.patch : removed because not applicable since the tests/test_transport.py has been changed upstreamed paramiko (3.4.0-1) unstable; urgency=medium * Team upload * New upstream version 3.4.0 - Fix Terrapin MitM attack (CVE-2023-48795) (Closes: #1059006) * Add debian/salsa-ci.yml * Update debian/patches/remove_pytest_relaxed.patch * Add python3-icecream to build-dependencies * Fix nose deprecation errors produced by pytest. Patch: 0001-Use-pytest-s-setup_method-in-pytest-8-the-nose-metho.patch * Fix 32-bit-ism in protocol seqno rollover test from Terrapin fix. Patch from upstream * Add myself to Uploaders paramiko (2.12.0-3) unstable; urgency=medium * remove myself -- Hector Cao <hector....@canonical.com> Fri, 17 May 2024 19:12:44 +0200 ** Changed in: paramiko (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2066061 Title: Please merge paramiko 3.4.0-1 into Oracular To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/paramiko/+bug/2066061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs