From 3e2dcad0da8c475a1028fac2df45ef1507c7e358 Mon Sep 17 00:00:00 2001 From: Mircea Ulinic Date: Tue, 30 Oct 2018 17:08:50 +0000 Subject: [PATCH] Enforce Paramiko >= 2.4.2 (#853) This is due to CVE-2018-7750 and CVE-2018-1000805, and the underlying libraries may not have this requirement. See https://nvd.nist.gov/vuln/detail/CVE-2018-7750 and https://nvd.nist.gov/vuln/detail/CVE-2018-1000805 for further details. --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index 4860ac4dd..63560ce30 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,6 @@ setuptools>=38.4.0 cffi>=1.11.3 +paramiko>=2.4.2 future textfsm jinja2