Skip to content
OpenAdvisories
Medium RHSA-2022:4712 1 CVE

Red Hat Security Advisory: RHV Engine and Host Common Packages security update

Published Sep 18, 2024 · Updated Dec 16, 2025

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 python-paramiko 0:2.4.3-3.el8ev
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 python-paramiko-doc 0:2.4.3-3.el8ev
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 python3-paramiko 0:2.4.3-3.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 python-paramiko 0:2.4.3-3.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 python-paramiko-doc 0:2.4.3-3.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 python3-paramiko 0:2.4.3-3.el8ev

Vulnerabilities 1

  • Medium 5.9
    CVE-2022-24302

    Race Condition in Paramiko

    In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

    paramiko paramiko paramiko Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1883949
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932149
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1933555
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2004018
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2004852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2006721
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2017070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2020620
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2034313
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2044362
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2060763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064795
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064798
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064799
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2065665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2066811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2071365
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4712.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24302
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24302
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24302
  • article
    https://github.com/paramiko/paramiko/releases/tag/2.10.1