- Add support-cryptography-25-and-above.patch:
  * Since SLE15 SP1 and above have cryptography 2.8, stop using deprecated
    methods, and update the required version. (bsc#1178341)

- paramiko-fix-1169489.patch: fixed fallout from last patch (bsc#1169489)

- add-support-for-new-OpenSSH-private-key-format.patch:
  Add support for new OpenSSH >= 7.8p1 private key format  (bsc#1166758)

- add disable-gssapi.patch - workaround for boo#1115769

- update to 2.4.2
- refresh paramiko-test_extend_timeout.patch
 * Fix exploit (CVE pending) in Paramiko's server mode (not client mode)
     where hostile clients could trick the server into thinking they were
     authenticated without actually submitting valid authentication.
 * Modify protocol message handling such that Transport does not respond
    to MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED
 * Updated SSHConfig.lookup <paramiko.config.SSHConfig.lookup> so it returns
    a new, type-casting-friendly dict subclass (~paramiko.config.SSHConfigDict)
    in lieu of dict literals.

- add paramiko-test_extend_timeout.patch (bsc#1085529)
  extend timeout in testsuite to pass on ppc64le 

update to version 2.4.1 (bsc#1085276, CVE-2018-7750):
  * changelog: update for #1039 / #1051
  * Screen off dev version of Python from test matrix
  * ensure ed25519 password is bytes
  * Cut 2.0.8

• Browse Source