[Bug 1665565] Re: python-paramiko 1.16.0-1 incompatible with python-crypto 2.6.1-6ubuntu0.16.04.1

[Ryan Beisner]

Confirmed that installing the updated python-crypto
2.6.1-6ubuntu0.16.04.2 unblocks UOSCI.

I was seeing trace:

Traceback (most recent call last):
  File "/usr/lib/python2.7/multiprocessing/process.py", line 258, in _bootstrap
    self.run()
  File "/usr/lib/python2.7/multiprocessing/process.py", line 114, in run
    self._target(*self._args, **self._kwargs)
  File "/home/ubuntu/bzr/ubuntu-openstack-ci-use-port-cleanup-tool/tools/../common/osci_utils.py", line 635, in ssh_command_check
    pkey=pkey_rsa, timeout=timeout)
  File "/usr/lib/python2.7/dist-packages/paramiko/client.py", line 325, in connect
    t.start_client()
  File "/usr/lib/python2.7/dist-packages/paramiko/transport.py", line 492, in start_client
    raise e
ValueError: CTR mode needs counter parameter, not IV

.

Now only receive a warning:

/usr/lib/python2.7/dist-packages/Crypto/Cipher/blockalgo.py:141:
FutureWarning: CTR mode needs counter parameter, not IV


** Changed in: charm-test-infra
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to paramiko in Ubuntu.
https://bugs.launchpad.net/bugs/1665565

Title:
  python-paramiko 1.16.0-1 incompatible with python-crypto
  2.6.1-6ubuntu0.16.04.1

Status in OpenStack Charm Test Infra:
  Fix Released
Status in MySQL Workbench:
  New
Status in paramiko package in Ubuntu:
  Confirmed

Bug description:
  Since python-crypto 2.6.1-6ubuntu0.16.04.1 landed, it seems python-
  paramiko 1.16.0-1 is not working anymore.

  /usr/lib/python2.7/dist-packages/paramiko/client.pyc in connect(self, hostname, port, username, password, pkey, key_filename, timeout, allow_agent, look_for_keys, compress, sock, gss_auth, gss_kex, gss_deleg_creds, gss_host, banner_timeout)
      323         if banner_timeout is not None:
      324             t.banner_timeout = banner_timeout
  --> 325         t.start_client()
      326         ResourceManager.register(self, t)
      327 

  /usr/lib/python2.7/dist-packages/paramiko/transport.pyc in start_client(self, event)
      490                 e = self.get_exception()
      491                 if e is not None:
  --> 492                     raise e
      493                 raise SSHException('Negotiation failed.')
      494             if event.is_set():

  ValueError: CTR mode needs counter parameter, not IV

  Seems related to the fix for CVE-2013-7459

  Extra information:

  root at kh001:~# lsb_release -rd
  Description:	Ubuntu 16.04.1 LTS
  Release:	16.04

  root at kh001:~# apt-cache policy python-paramiko
  python-paramiko:
    Installed: 1.16.0-1
    Candidate: 1.16.0-1
    Version table:
   *** 1.16.0-1 500
          500 http://be.archive.ubuntu.com/ubuntu xenial/main amd64 Packages
          500 http://be.archive.ubuntu.com/ubuntu xenial/main i386 Packages
          100 /var/lib/dpkg/status

  root at kh001:~# apt-cache policy python-crypto
  python-crypto:
    Installed: 2.6.1-6ubuntu0.16.04.1
    Candidate: 2.6.1-6ubuntu0.16.04.1
    Version table:
   *** 2.6.1-6ubuntu0.16.04.1 500
          500 http://be.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
          500 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages
          100 /var/lib/dpkg/status
       2.6.1-6build1 500
          500 http://be.archive.ubuntu.com/ubuntu xenial/main amd64 Packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-test-infra/+bug/1665565/+subscriptions