Category Archives: Advisories

python-paramiko-2.4.3-2.el8

Read Time:30 Second

FEDORA-EPEL-2022-ad126686cf

Packages in this update:

python-paramiko-2.4.3-2.el8

Update description:

CVE-2022-24302: Creation of new private key files using ~paramiko.pkey.PKey subclasses was subject to a race condition between file creation and mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files; this has been patched by using os.open and os.fdopen to ensure new files are opened with the correct mode immediately (we’ve left the subsequent explicit ‘chmod’ in place to minimize any possible disruption).

Read More