Summary: | <dev-python/paramiko-2.10.1: private key file disclosure via race condition | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | alicef, mgorny, python |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/paramiko/paramiko/tree/2.10.1 | ||
Whiteboard: | B4 [noglsa] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 835612 | ||
Bug Blocks: |
Description
John Helmert III
2022-03-19 01:58:13 UTC
paramiko stable at 2.11.0 "Note: Please do not mark this bug as resolved after bumping or stabilizing. The Security Team will take care of that. Thanks." Requires local access, very hard to exploit. No GLSA. All done! |