Skip to content
OpenAdvisories
Medium RHSA-2022:8863 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-paramiko) security update

Published Sep 18, 2024 · Updated Dec 16, 2025

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 python-paramiko 0:2.4.2-8.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 python3-paramiko 0:2.4.2-8.el8ost

Vulnerabilities 1

  • Medium 5.9
    CVE-2022-24302

    Race Condition in Paramiko

    In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

    paramiko paramiko paramiko Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2065665
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8863.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24302
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24302
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24302
  • article
    https://github.com/paramiko/paramiko/releases/tag/2.10.1