Red Hat Security AdvisoryRHSA-2022:4712
RHV Engine and Host Common Packages security update
Released 2022-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 python-paramiko-2.4.3-3.el8ev, python-paramiko-doc-2.4.3-3.el8ev, python3-paramiko-2.4.3-3.el8ev
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts python-paramiko-2.4.3-3.el8ev, python-paramiko-doc-2.4.3-3.el8ev, python3-paramiko-2.4.3-3.el8ev
Fixes 1 record
Priority LOW 31
In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0208 · Published 2022-03-17 · Partial fix · 2.10.1, 2.9.3 CWE-362
