ROS-20220405-01

A vulnerability in the Python Paramiko implementation of the SSHv2 protocol, is related to the race condition in the function writeprivatekeyfile between create and chmod operations. Exploitation of the vulnerability could allow an an attacker to exploit the race condition and gain unauthorized...

USN-5351-2 paramiko vulnerability

USN-5351-1 fixed a vulnerability in Paramiko. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker could possibly use this issue to gain...

Ubuntu 18.04 LTS / 20.04 LTS : Paramiko vulnerability (USN-5351-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5351-1 advisory. Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker could possibly use this issue t...

USN-5351-2: Paramiko vulnerability

USN-5351-1 fixed a vulnerability in Paramiko. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker could possibly use this issue to gain...

Ubuntu 16.04 ESM : Paramiko vulnerability (USN-5351-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5351-2 advisory. USN-5351-1 fixed a vulnerability in Paramiko. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

Ubuntu: Security Advisory (USN-5351-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5351-1 paramiko vulnerability

Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker could possibly use this issue to gain access to private keys...

USN-5351-1: Paramiko vulnerability

Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker could possibly use this issue to gain access to private keys...

Fedora: Security Advisory for python-paramiko (FEDORA-2022-806492f1d1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python-paramiko (FEDORA-2022-8eb95d8611)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: python-paramiko-2.10.3-1.fc34

Paramiko a combination of the Esperanto words for "paranoid" and "friend" is a module for python 2.3 or greater that implements the SSH2 protocol for secu re encrypted and authenticated connections to remote machines. Unlike SSL aka TLS, the SSH2 protocol does not require hierarchical certificate...

[SECURITY] Fedora 35 Update: python-paramiko-2.10.3-1.fc35

Paramiko a combination of the Esperanto words for "paranoid" and "friend" is a module for python 2.3 or greater that implements the SSH2 protocol for secu re encrypted and authenticated connections to remote machines. Unlike SSL aka TLS, the SSH2 protocol does not require hierarchical certificate...

Fedora: Security Advisory for python-paramiko (FEDORA-2022-bb5c461682)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: python-paramiko-2.10.3-1.fc36

Paramiko a combination of the Esperanto words for "paranoid" and "friend" is a module for python 2.3 or greater that implements the SSH2 protocol for secu re encrypted and authenticated connections to remote machines. Unlike SSL aka TLS, the SSH2 protocol does not require hierarchical certificate...

Debian: Security Advisory (DLA-2959-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2959-1] paramiko security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2959-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 21, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2959-1 : paramiko - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2959 advisory. - In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure. CVE-2022-24302...

DLA-2959-1 paramiko - security update

Bulletin has no description...

logixbase (>=0.1.1 <=1.0.1) potentially affected by CVE-2022-24302 via paramiko (=2.10.0)

paramiko PYPI version =2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - logixbase =0.1.1, =1.0.1 Source cves: CVE-2022-24302 Source advisory: OSV:GHSA-F8Q4-JWWW-X3WV...

build-magic (>=0.4.1 <=0.5.1rc0), lemur (>=1.1.0 <=1.2.0) +10 more potentially affected by CVE-2022-24302 via paramiko (>=2.9.1 <=2.9.2)

paramiko PYPI version =2.9.1, =0.4.1, =1.1.0, =0.10.10, =1.0.0, =0.10.3, =0.2.0.1, =0.0.0.dev0, =1.24.0, =1.34.0 - wizardwebssh =1.9.0 Source cves: CVE-2022-24302 Source advisory: OSV:GHSA-F8Q4-JWWW-X3WV...