[ubuntu/jammy-proposed] paramiko 2.8.1-1ubuntu3 (Accepted)

[Marc Deslauriers]

paramiko (2.8.1-1ubuntu3) jammy; urgency=medium

  * SECURITY UPDATE: race condition in write_private_key_file
    - debian/patches/CVE-2022-24302.patch: create file with proper
      permissions in paramiko/pkey.py, tests/test_pkey.py.
    - CVE-2022-24302

Date: Thu, 24 Mar 2022 09:21:29 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/paramiko/2.8.1-1ubuntu3
-------------- next part --------------
Format: 1.8
Date: Thu, 24 Mar 2022 09:21:29 -0400
Source: paramiko
Built-For-Profiles: noudeb
Architecture: source
Version: 2.8.1-1ubuntu3
Distribution: jammy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 paramiko (2.8.1-1ubuntu3) jammy; urgency=medium
 .
   * SECURITY UPDATE: race condition in write_private_key_file
     - debian/patches/CVE-2022-24302.patch: create file with proper
       permissions in paramiko/pkey.py, tests/test_pkey.py.
     - CVE-2022-24302
Checksums-Sha1:
 2d0f3ae082b2c51d41165ccd4bbca3490204d1b6 2480 paramiko_2.8.1-1ubuntu3.dsc
 f24ccd072a7320235ba19a0c4e7716fd4a2109de 12344 paramiko_2.8.1-1ubuntu3.debian.tar.xz
 cd8a08cfd00eee97745f4241d2b7a8affbe075e5 7617 paramiko_2.8.1-1ubuntu3_source.buildinfo
Checksums-Sha256:
 ca9dff72d99553f46b10abf6a45a63d3d07f2fac129a104498585fcd4e3db764 2480 paramiko_2.8.1-1ubuntu3.dsc
 9466e1bfb1b1a97c76b24474cfb5b745ad8d1da50ad823d1cab13d61509c49d2 12344 paramiko_2.8.1-1ubuntu3.debian.tar.xz
 5af4ed50b7443b1a125b8b1c7e44bc9936ab16f146bcdb77bb37a4e9ec2ff832 7617 paramiko_2.8.1-1ubuntu3_source.buildinfo
Files:
 83761ff4287f8a03e583e33be438c8b3 2480 python optional paramiko_2.8.1-1ubuntu3.dsc
 4dbd83658c2d2422ec2211dfd524c23f 12344 python optional paramiko_2.8.1-1ubuntu3.debian.tar.xz
 b4d2bed5150709e2f97419080f4e2ca8 7617 python optional paramiko_2.8.1-1ubuntu3_source.buildinfo
Original-Maintainer: Debian Python Team <team+python at tracker.debian.org>