X2Go Bug report logs - #646
PyHoca-GUI for Windows 0.5.0.0-pre02 has PyCrypto 2.6.0 with CVE-2013-1445

version graph

Package: pyhoca-gui; Maintainer for pyhoca-gui is X2Go Developers <x2go-dev@lists.x2go.org>; Source for pyhoca-gui is src:pyhoca-gui.

Reported by: Michael DePaulo <mikedep333@gmail.com>

Date: Mon, 20 Oct 2014 13:20:01 UTC

Severity: normal

Tags: pending

Found in version 0.5.0.0-pre02

Fixed in version 0.5.0.4

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

Full log


🔗 View this message in rfc822 format

X-Loop: owner@bugs.x2go.org
Subject: Bug#646: Found a build!
Reply-To: Michael DePaulo <mikedep333@gmail.com>, 646@bugs.x2go.org
Resent-From: Michael DePaulo <mikedep333@gmail.com>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Mon, 20 Oct 2014 13:35:01 +0000
Resent-Message-ID: <handler.646.B646.1413812077539@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 646
X-X2Go-PR-Package: pyhoca-gui
X-X2Go-PR-Keywords: 
Received: via spool by 646-submit@bugs.x2go.org id=B646.1413812077539
          (code B ref 646); Mon, 20 Oct 2014 13:35:01 +0000
Received: (at 646) by bugs.x2go.org; 20 Oct 2014 13:34:37 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,
	T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham version=3.3.2
Received: from mail-wi0-f173.google.com (mail-wi0-f173.google.com [209.85.212.173])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 7EA945DB47
	for <646@bugs.x2go.org>; Mon, 20 Oct 2014 15:34:36 +0200 (CEST)
Received: by mail-wi0-f173.google.com with SMTP id fb4so7177848wid.0
        for <646@bugs.x2go.org>; Mon, 20 Oct 2014 06:34:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:date:message-id:subject:from:to:content-type;
        bh=Z6MokwED/dVQ0IfTrhzYEUC39rJleQex+R/s4W/9sG4=;
        b=LyFDMqP45bNOSCBpKElSs6WHh8errTaTw3XJxd6bUVKf71PKbLJSgcrMOze5mRcBXs
         nV71zVfrxUUsXuq657nYRULorDQ7UtIWgbyII5/XpjYYUQTWzwValy6SD0eaZ9RaWbZL
         DBEDbL3v8nkRjKud7Ut2jyItPmLP9I/KFCX34tV7KayL3EB+BA8JqCO2+KFLPwhUOCO2
         y+1gyKKV+0yhcQHMw63uQMxfpH/wx14gmCJj5rhWiCKxk1bB6m/ZZhFZhkwH2yt35L8h
         ogV/bhhIshsm+HHKAE22rJn7+Hflr464yj+2zeti6Gz0VT5DDTzShGkqY/XM7KLmC590
         ZF6A==
MIME-Version: 1.0
X-Received: by 10.194.239.10 with SMTP id vo10mr33593455wjc.29.1413812075667;
 Mon, 20 Oct 2014 06:34:35 -0700 (PDT)
Received: by 10.180.211.11 with HTTP; Mon, 20 Oct 2014 06:34:35 -0700 (PDT)
Date: Mon, 20 Oct 2014 09:34:35 -0400
Message-ID: <CAMKht8iUn5QP4yWkEwQyv_4vob+D27zqVTTiaxLewmOPFoaGQQ@mail.gmail.com>
From: Michael DePaulo <mikedep333@gmail.com>
To: 646@bugs.x2go.org
Content-Type: text/plain; charset=UTF-8
http://blog.tkbe.org/archive/pre-compiled-binaries-for-pycrypto-2-6-1-py27-on-win7/

In case that blog ever goes down, here are the direct links and md5sums:

https://www.dropbox.com/s/8kf7vrlc59bxqi3/pycrypto-2.6.1-cp27-none-win32.whl?dl=0
aa791ce84cc2713f468fcc759154f47f

https://www.dropbox.com/s/nd6h6ay0z4u6u0o/pycrypto-2.6.1.win32-py2.7.exe?dl=0
1a8cec46705cc83fcd77d24b6c9d079c

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Wed Dec 4 08:43:26 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.