Fabrice Fontaine 6a826c6d23 package/python-paramiko: security bump to version 2.10.3 ...

Fix CVE-2022-24302: Creation of new private key files using PKey
subclasses was subject to a race condition between file creation & mode
modification, which could be exploited by an attacker with knowledge of
where the Paramiko-using code would write out such files.

https://github.com/paramiko/paramiko/blob/2.10.3/sites/www/changelog.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ae699d7f9a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2022-04-04 14:32:29 +02:00

642 B

Raw Blame History

View Raw