This version was released on August 29, 2017, and it is recommended to update as soon as possible. PyPI has warned the users about the presence of a backdoor in the d8s-asns package, and PyPi has blocked the access to the package from all the users. The reason for this is the presence of a third-party package with a backdoor. In the PyPI page, the social engineering warning says: “A third party has repackaged one of the python package management sites and inserted a backdoor.” The affected version of the d8s-asns package is 0.1.0, released on August 29, 2017. So, if you are using any of the supported version of Python, then you are recommended to update as soon as possible.

Installing d8s-asns on Ubuntu 17.04

If you are using the PyPi repository to install d8s-asns from, then you have to install the package with pip.
To install d8s-asns on Ubuntu 17.04:
sudo apt update sudo apt upgrade sudo apt install python-pip python3-pip python3-dev

Installing d8s-asns on Ubuntu 16.04

To install d8s-asns on Ubuntu 16.04, you would have to first remove the package that is already installed:
$ sudo apt-get purge python-d8s
Next, make sure the Python 3.5 is installed on your system before installing the d8s-asns package:
$ sudo apt-get install python3.5
The latest version of d8s-asns can be installed using a PIP (Python Package Index) command:
$ pip3.5 install --upgrade --no-deps d8s_0.1.0-py3.5

Install new version of d8s-asns

The new version of the d8s-asns package is 0.1.1 and has been released on August 29, 2017. You can use pip to install the new version:

pip install -U d8s-asns==0.1.1

Timeline

Published on: 10/11/2022 22:15:00 UTC
Last modified on: 10/13/2022 02:37:00 UTC

References