OPENSUSE-SU-2026:21127-1 Security update for python-paramiko

This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: superset, pgadmin4, datadog-agent, datadog-agent-fips, nemo, py3-paramiko, openstack-nova-2026.1, airflow, keep-fips, keep, duplicity...

0lever-utils (>=0.0.2 <=0.0.7), a12rta (=0.1.0) +1801 more potentially affected by CVE-2026-44405 via paramiko (>=1.15.0 <=4.0.0)

paramiko PYPI version =1.15.0, =0.0.2, =1.0.1, =0.0.15, =1.0.0, =0.15.0, =0.2.0, =1.0.1, =0.5.0, =2026.2.3, =0.0.0, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

DEBIAN-CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

UBUNTU-CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

CVE-2026-44405

Paramiko up to 4.0.0 (before commit a4489456b6f65281e172380cc4826cee5e851dbb) permits SHA-1 in rsakey.py. Affected: Paramiko’s RSA key handling. Root cause: use of SHA-1 algorithm. Impact: low (Confidentiality: None, Integrity: Low). Remediation: apply the patch introduced in the a448945 commit (...