Skip to content

Commit

Permalink
Bump paramiko version
Browse files Browse the repository at this point in the history
The server-side vulnerability in Paramiko 2.1.5 does not affect us
(we're only using Paramiko in client mode), but it doesn't hurt
to require a version where the vulnerability is fixed.

References:
https://nvd.nist.gov/vuln/detail/CVE-2018-1000805
paramiko/paramiko#1283
  • Loading branch information
fghaas committed Oct 12, 2018
1 parent 0c8c5c4 commit 493444b
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion requirements/base.txt
Expand Up @@ -6,7 +6,7 @@ keystoneauth1==2.18.0
python-keystoneclient==3.10.0
python-heatclient==1.6.1
python-novaclient==7.1.2
paramiko==2.1.5
paramiko==2.1.6
celery==3.1.18
apscheduler==3.5.1
-e git+https://github.com/edx/xblock-utils.git@v1.0.5#egg=xblock-utils==v1.0.5
Expand Down
2 changes: 1 addition & 1 deletion setup.py
Expand Up @@ -64,7 +64,7 @@ def package_data(pkg, roots):
'python-keystoneclient==3.10.0',
'python-heatclient==1.6.1',
'python-novaclient==7.1.2',
'paramiko==2.1.5',
'paramiko==2.1.6',
'apscheduler==3.5.1',
],
entry_points={
Expand Down

0 comments on commit 493444b

Please sign in to comment.