linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-paramiko_3.5.1.bb, branch wrynose Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=wrynose 2026-03-18T21:33:33+00:00 python3-paramiko: upgrade 3.5.1->4.0.0 2026-03-18T21:33:33+00:00 Jiaying Song jiaying.song.cn@windriver.com 2026-03-18T05:51:57+00:00 urn:sha1:d62b06c427c732d1ce405af653ebd84ad18cfafd Changelog: https://www.paramiko.org/changelog.html Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> python3-paramiko: set CVE_PRODUCT 2025-12-31T16:28:51+00:00 Gyorgy Sarvari skandigraun@gmail.com 2025-12-30T12:24:46+00:00 urn:sha1:e22d2a7ba6e96c1312c368b4a6448bea5b6559da Set correct CVE_PRODUCT for paramiko. The default python:paramiko value doesn't match CVEs, because the product has its own set of CPEs associated with CVEs. See CVE db query: sqlite> select * from products where PRODUCT = 'paramiko'; CVE-2008-0299|python_software_foundation|paramiko|1.7.1|=|| CVE-2018-1000805|paramiko|paramiko|1.17.6|=|| CVE-2018-1000805|paramiko|paramiko|1.18.5|=|| CVE-2018-1000805|paramiko|paramiko|2.0.8|=|| CVE-2018-1000805|paramiko|paramiko|2.1.5|=|| CVE-2018-1000805|paramiko|paramiko|2.2.3|=|| CVE-2018-1000805|paramiko|paramiko|2.3.2|=|| CVE-2018-1000805|paramiko|paramiko|2.4.1|=|| CVE-2018-7750|paramiko|paramiko|||1.17.6|< CVE-2018-7750|paramiko|paramiko|1.18.0|>=|1.18.5|< CVE-2018-7750|paramiko|paramiko|2.0.0|>=|2.0.8|< CVE-2018-7750|paramiko|paramiko|2.1.0|>=|2.1.5|< CVE-2018-7750|paramiko|paramiko|2.2.0|>=|2.2.3|< CVE-2018-7750|paramiko|paramiko|2.3.0|>=|2.3.2|< CVE-2018-7750|paramiko|paramiko|2.4.0|=|| CVE-2022-24302|paramiko|paramiko|||2.10.1|< CVE-2023-48795|paramiko|paramiko|||3.4.0|< Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> python3-paramiko: upgrade 3.5.0 -> 3.5.1 2025-02-12T17:16:05+00:00 Wang Mingyu wangmy@fujitsu.com 2025-02-10T09:01:20+00:00 urn:sha1:e22a95f76ed7354d213c6f0c2c25938cb5c2f279 Changelog: ========== - Private key material is now explicitly 'unpadded' during decryption, removing a reliance on some lax OpenSSL behavior & making us compatible with future Cryptography releases. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>