paramiko (1.10.1-1git1ubuntu0.2) trusty-security; urgency=medium

  * SECURITY UPDATE: server-side authentication vulnerability
    - debian/patches/CVE-2018-1000805-pre.patch: fix MSG_UNIMPLEMENTED in
      paramiko/transport.py, added tests to tests/test_transport.py.
    - debian/patches/CVE-2018-1000805.patch: split messages dict in
      paramiko/auth_handler.py, added tests to tests/test_transport.py.
    - debian/control: added python-mock to Build-Depends.
    - CVE-2018-1000805

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 16 Oct 2018 11:21:31 -0400

paramiko (1.10.1-1git1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: customized clients can skip auth
    - 0004-Fixes-CVE-2018-7750-1175.patch: send message failure if not
      authenticated and message type is a service request
    - 0002-Allow-overriding-test-client-connect-kwargs-in-Trans.patch,
      0003-Initial-tests-proving-CVE-2018-7750-1175.patch:
      add testcases plus prereq
    - CVE-2018-7750
  * debian/rules: actually run the test suite during the build

 -- Steve Beattie <sbeattie@ubuntu.com>  Thu, 15 Mar 2018 16:04:49 -0700

paramiko (1.10.1-1git1build1) trusty; urgency=medium

  * Rebuild to drop files installed into /usr/share/pyshared.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 23 Feb 2014 13:49:47 +0000

paramiko (1.10.1-1git1) trusty; urgency=low

  Upload current Debian packaging git head.

  [ Jean-Baptiste Lallement ]
  * Add autopkgtest that runs the upstream test suite against the installed
    package. (LP: #1248706)

 -- Martin Pitt <martin.pitt@ubuntu.com>  Thu, 07 Nov 2013 14:17:13 +0100

paramiko (1.10.1-1) unstable; urgency=low

  * Imported Upstream version 1.10.1
  * debian/control: Revise debhelper Build-Depends entry
  * debian/{control,watch}: Update for new maintainer and source address
    (Closes: #690080) - thanks to Mike Gabriel <mike.gabriel@das-
    netzwerkteam.de>
  * debian/gbp.conf: Add standard git-buildpackage settings
  * debian/patches/*: Removed patch included in upstream
  * debian/patches/*: Removed hostkey patch that caused problems -
    thanks to Lars Noschinski <lars@public.noschinski.de>
  * debian/*: clean up build files for new version
  * debian/control: Add Build-Depend on python-epydoc
  * debian/patches/*: Add patch to remove upstream Makefile
  * debian/*: Build out separate paramiko-doc package (Closes: #682255)
    - thanks to Touko Korpela <touko.korpela@iki.fi>

 -- Jeremy T. Bouse <jbouse@debian.org>  Thu, 27 Jun 2013 22:59:08 -0400

paramiko (1.7.7.1-3) unstable; urgency=low

  * Accept NMU uploads (Closes: #659007, #668239)
  * Update package to clean up lintian findings
  * debian/source/local-options: set unapply-patches option
  * debian/watch: Don't need to use uupdate with gbp
  * debian/control: Upgrade Debian Standard (no changes needed)

 -- Jeremy T. Bouse <jbouse@debian.org>  Mon, 09 Jul 2012 11:02:38 -0400

paramiko (1.7.7.1-2.2) unstable; urgency=low

  * Non-maintainer upload.
  * Add Fix-SSHException-when-re-keying-over-a-fast-connection.patch patch.
    Fix bug "Transfers fail after 1GB; rekeying window too small".
    (Closes: #659007)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 07 Jul 2012 17:09:08 +0200

paramiko (1.7.7.1-2.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix broken host key handling when port != 22 (Closes: 668239)

 -- Luk Claes <luk@debian.org>  Thu, 05 Jul 2012 00:38:56 +0000

paramiko (1.7.7.1-2) unstable; urgency=low

  * debian/*: Update build to use dh_python2 (Closes: #637379)
  * Debian package build environment cleanup
  * Acknowledge previous NMU patch that was included in upstream update
    release Thanks Jelmer Vernooij <jelmer@debian.org> (Closes: #611361)

 -- Jeremy T. Bouse <jbouse@debian.org>  Sun, 02 Oct 2011 13:46:01 -0400

paramiko (1.7.7.1-1) unstable; urgency=low

  * Imported Upstream version 1.7.7.1 (Closes: #627754)
  * debian/patches: Patches included in upstream
  * debian/control: Updated standards version (no change)

 -- Jeremy T. Bouse <jbouse@debian.org>  Tue, 31 May 2011 21:23:55 -0400

paramiko (1.7.6-6) unstable; urgency=low

  * Add back quilt support NMU removed & update clean target
  * Accept NMU upload. Thanks Jelmer Vernooij <jelmer@debian.org>

 -- Jeremy T. Bouse <jbouse@debian.org>  Sat, 29 Jan 2011 12:02:16 -0500

paramiko (1.7.6-5.1) unstable; urgency=low

  * Non-maintainer upload.
  * Avoid deprecated RandomPool. Patch by Gary van der Merwe. Closes:
    #576697
  * Try connecting to each available address family until one succeeds.
    Patch by Andrew Bennetts.  Closes: #602251
  * Bump standards version to 3.9.1 (no changes).

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 28 Jan 2011 12:35:12 +0100

paramiko (1.7.6-5) unstable; urgency=low

  * debian/control: Fix python-crypto version dependency
  * debian/rules: Remove simple-patchsys.mk

 -- Jeremy T. Bouse <jbouse@debian.org>  Sat, 17 Jul 2010 00:00:40 -0400

paramiko (1.7.6-4) unstable; urgency=low

  * Update Standards-Version to 3.9.0
  * debian/control: Add versioned dependency on python-crypto (Closes:
    #479596)
  * debian/control: Build-Depends python-all-dev to python-all

 -- Jeremy T. Bouse <jbouse@debian.org>  Fri, 16 Jul 2010 10:54:06 -0400

paramiko (1.7.6-3) unstable; urgency=medium

  * Add conflict against fabric 0.9.0-1 (Closes: #563490) - thanks to
    Chris Lamb <lamby@debian.org> for being a packaging tool

 -- Jeremy T. Bouse <jbouse@debian.org>  Mon, 04 Jan 2010 10:12:32 -0500

paramiko (1.7.6-2) unstable; urgency=low

  * debian/control: Fix last remaining lintian warning

 -- Jeremy T. Bouse <jbouse@debian.org>  Wed, 16 Dec 2009 08:15:36 -0500

paramiko (1.7.6-1) unstable; urgency=low

  * Imported Upstream version 1.7.6 (Closes: #543784)
  * Fix formatting error for __all__ in paramiko/__init__.py (Closes:
    #494836)
  * Update debian/watch syntax
  * Package build clean-up
  * Include docs/ contents with build (LP: #364998)
  * Update Build-Depends
  * debian/control: Update Vcs-* entries

 -- Jeremy T. Bouse <jbouse@debian.org>  Tue, 15 Dec 2009 09:46:29 -0500

paramiko (1.7.4-0.1) unstable; urgency=medium

  * NMU.
  * New upstream version.
    - Fix random number regression (stop using RandomPool). Closes: #490961.

 -- Matthias Klose <doko@debian.org>  Fri, 18 Jul 2008 14:16:08 +0200

paramiko (1.7.3-1) unstable; urgency=low

  * New upstream version
    Closes: #475505.
  * Acknowledge NMU changes
  * Missing examples included
    Closes: #455547.
  * Confirmed new upstream version corrected FutureWarning
    Closes: #405552.

 -- Jeremy T. Bouse <jbouse@debian.org>  Sun, 04 May 2008 11:41:27 -0400

paramiko (1.7.2-0.1) unstable; urgency=low

  * Non-maintainer upload to DELAYED/14-day. (¹)
  * New upstream release. (Closes: #415060)
  * Drop the patch introduced in 1.6.4-1.1, as it's part of 1.7.2.

    (¹) Counting since the initial 1.7.1-0.1 upload in Jan 13th.

 -- Adeodato Simó <dato@net.com.org.es>  Thu, 24 Jan 2008 13:54:18 +0100

paramiko (1.6.4-1.1) unstable; urgency=high

  * Non-maintainer upload by security team.
  * Fix insecure use of RandomPool if paramiko is used for threads or multiple
    forked processes. This enables one session to predict random data of
    another session using its own random data.
    (CVE id pending; Closes: #460706).

 -- Nico Golde <nion@debian.org>  Mon, 14 Jan 2008 19:36:40 +0100

paramiko (1.6.4-1) unstable; urgency=low

  * New upstream release (Closes: #344734, #382348).

 -- Jeremy T. Bouse <jbouse@debian.org>  Tue, 26 Dec 2006 15:48:42 -0500

paramiko (1.5.2-0.1) unstable; urgency=low

  [ Wouter van Heyst ]
  * Non-maintainer upload.
  * New upstream release.
    + Drop python_script_fix.patch and pathmangle.sh, no longer needed.
  * Merge some ubuntu changes.
    + Add watch file.
    + Update copyright file.

 -- Robert Collins <robertc@robertcollins.net>  Fri, 28 Jul 2006 14:26:29 +1000

paramiko (1.5-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix B-D-I/B-D glitches.
  * Update package to the new python policy (Closes: #373472).

 -- Pierre Habouzit <madcoder@debian.org>  Thu, 29 Jun 2006 23:00:34 +0200

paramiko (1.5-1) unstable; urgency=low

  * New upstream release.
  * Initial package upload (Closes: #292942).

 -- Jeremy T. Bouse <jbouse@debian.org>  Tue, 18 Oct 2005 14:57:46 -0700

paramiko (1.1-1) unstable; urgency=low

  * Initial Release.

 -- Guido Guenther <agx@debian.org>  Mon, 31 Jan 2005 11:24:37 +0100

