[SECURITY] [DLA 2959-1] paramiko security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2959-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Chris Lamb
March 21, 2022 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : paramiko
Version : 2.0.0-1+deb9u2
CVE ID : CVE-2022-24302
Debian Bug : #1008012
It was discovered that there was a potential race condition in
Paramiko, a pure-Python implementation of the SSH algorithm. In
particular, unauthorised information disclosure could have occurred
during the creation of SSH private keys.
For Debian 9 "Stretch", this problem has been fixed in version
2.0.0-1+deb9u2.
We recommend that you upgrade your paramiko packages.
For the detailed security status of paramiko please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/paramiko
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=pMWy
-----END PGP SIGNATURE-----
Reply to: